A Framework for Evaluating Emerging Cyberattack Capabilities of AI