The AI shift in cyber risk: why leaders must act now