Phishing reclaims the top initial access spot, attackers experiment with AI tools