AI is reshaping phishing into a smarter, more dangerous threat—and small businesses are prime targets.