A single prompt was enough to hijack every AI agent in an AWS account, Zenity researchers found The Decoder