Experts warn that automation, machine identities and compromised credentials are creating new security risks, making resilience and governance as important as prevention