AI is transforming security, but organizations must not lose sight of identity, access and least privilege.