Hackers Use Hidden Website Instructions in New Attacks on AI Assistants