The best way to protect against phishing attacks is to put strong technical controls in place with AI that can augment fallible human behaviors.