Researchers find vulnerabilities in OpenAI's Atlas agentic browser