Google DeepMind, Anthropic and Microsoft are trying to prevent ‘indirect prompt injection attacks’ by hackers