Google DeepMind Researchers Map Web Attacks Against AI Agents