AI agents did the dirty work, with hackers gaining privileged access in some environments in under three hours