As AI shortens the path from vulnerability to attack, most organizations are still unprepared to regain control once systems are compromised