Why AI Keeps Falling for Prompt Injection Attacks