A classified AI demonstration reveals a powerful vulnerability-finding model, prompting urgent responses from banks and lawmakers on potential regulatory changes.