Vulnerability Exploitation Overtakes Stolen Credentials in AI-Driven Cyberattacks