New research outlines how attackers bypass safeguards and why AI security must be treated as a system-wide problem.