Not to shit on the hype, but these are reasonably documented methods that surely are part of the training data
What I don't see is it inventing anything novel to do it. So it's not a digital weapon or scary or whatever sort of weird marketing spin anyone is trying to put on it.
When seeing how agents put together exploit chains they are far better than most people, you start getting to the point that they are just below the capabilities of the top researchers. Now remember that quantity is a quality itself and while there aren't that many good cyber security researchers, we're shitting out thousands of GPUs per day.