Active Attacks: Red-teaming LLMs via Adaptive Environments