South African organisations are facing a growing cyber security challenge as deepfakes become harder to detect and employees increasingly turn to unsanctioned AI tools.