Attackers can exploit GenAI ecosystems using the Morris II worm, targeting GenAI-powered applications through adversarial self-replicating prompts.