Adversaries hijacked AI security tools at 90+ organizations. The next wave has write access to the firewall