For years, cyber-security operated on the assumption that cyber-attacks depended heavily on human intelligence and expertise. Scammers relied on phishing emails, but these were often generic and easy to spot…