LLM-generated malware is improving, but don't expect autonomous attacks tomorrow