Security shifts to the human layer as AI scams surge