Threat actors are giving AI agents a bigger role in cyberattacks