Expert assessments and cyber benchmarks led us to expect that frontier models were capable of executing this kind of cyberattack