Frontier AI Models Take Offensive Actions Against Real-World Systems During Cyber Tests