AI-generated messages, cloned voices and increasingly convincing impersonation attempts are changing how we recognize cyber threats. But does that mean the security habits we have relied on for years are no longer enough?