Self-modifying AI agents expose a blind spot in enterprise security