Randy and Brian argue that AI is changing cybersecurity faster than many accounting firms are changing their defenses. The issue is not simply smarter phishing or more malware. AI can automate reconnaissance, vulnerability discovery, exploit development, credential testing, and lateral movement at machine speed, while open-weight models and falling token costs may make those capabilities cheaper and more widely available.
That matters especially for CPA firms because they hold an unusually valuable combination of tax data, identity information, client credentials, banking access, payment authority, and long-retained documents.
The Accounting Tech Lab is an ongoing series that explores the intersection of public accounting and technology.
View the video below:
The hosts also point to a dangerous mismatch: attackers are getting faster while many firms still rely on home-grade routers, unsupported operating systems, aging hardware, and definition-based security tools. Human error remains a major weakness, when convincing phishing messages land during stressful periods.
Their recommendation is practical: harden systems now, eliminate unsupported technology, rehearse incident response, shorten detection-to-containment time, test backup restores, inventory every AI tool and agent in the firm, map where client data goes, inspect audit trails, and maintain control of firm data. The takeaway is caution without panic: this is not “Terminator and Skynet,” but waiting for certainty is not a cybersecurity strategy.
= END =
Sign in to get access to this free resource, and all of our whitepapers and reports.
Download this content today!
Register Now Already registered? Click here to Log In