Public web pages are actively hijacking enterprise AI agents via indirect prompt injections, Google researchers warn.