I saw how an "evil" AI chatbot finds vulnerabilities. It's as scary as you think