AI agents are finding new ways to bypass safeguards