Ransomware crews now target the small businesses they used to ignore, and AI has made phishing emails nearly impossible to spot by eye. Covers low-cost defenses that stop most attacks, the one verification rule that defeats the costliest scam, and where AI actually replaces work versus just adding subscriptions.