thumbnail When LLMs autonomously attack