How AI Sees Cyber Risk: Inside AI-Driven Attack Surface Management