Most breaches don't start with a brilliant hacker outsmarting a firewall. They start with a reused password, an unlocked account, or a rushed click on a message that looked legitimate enough. This