Telling an LLM that 2 + 2 = 5 is enough to make it follow forbidden instructions: New attack provides one more reason why AI browsers are a bad idea https://arstechnica.com/security/2026/06/ai-browsers-can-be-lulled-into-a-dream-world-where-guardrails-no-longer-apply/