How AI, automation, session theft, and device-code phishing are changing cybersecurity, and which defensive habits matter most in 2026.