AI made it cheap to clone a CEO's voice and email 10,000 employees at once. Adaptive Security's answer is to run those attacks first - as a drill - and see who clicks.