IBM's AI agent Bob easily duped to run malware, researchers show