A Cambridge-led study finds AI is not turning hackers into superhackers. It’s mostly helping them write blog spam.