AI Speeds Attacks, But Identity Remains Cybersecurity’s Weakest Link