Turns Out You Don’t Need The Most Powerful AI Models to Cause a Major Cybersecurity Incident