Google's security team scanned billions of web pages and found real payloads designed to trick AI agents into sending money, deleting files, and leaking credentials.