In ATL272, “The Gathering Storm,” Randy Johnston and Brian Tankersley argue that AI is changing cybersecurity faster than many accounting firms are changing their defenses. The issue is not simply smarter phishing or more malware. AI can automate reconnaissance, vulnerability discovery, exploit development, credential testing, and lateral movement at machine speed, while open-weight models and falling token costs may make those capabilities cheaper and more widely available. That matters especially for CPA firms because they hold an unusually valuable combination of tax data, identity information, client credentials, banking access, payment authority, and long-retained documents.
The hosts also point to a dangerous mismatch: attackers are getting faster while many firms still rely on home-grade routers, unsupported operating systems, aging hardware, and definition-based security tools. Human error remains a major weakness, when convincing phishing messages land during stressful periods.
Their recommendation is practical: harden systems now, eliminate unsupported technology, rehearse incident response, shorten detection-to-containment time, test backup restores, inventory every AI tool and agent in the firm, map where client data goes, inspect audit trails, and maintain control of firm data. The takeaway is caution without panic: this is not “Terminator and Skynet,” but waiting for certainty is not a cybersecurity strategy.
Pull Quotes

TimeSpeakerQuote
00:01:07 | Randy Johnston | “We want you to start being proactive now on protecting your businesses.”
00:02:32 | Brian Tankersley | “I think that security is going through a similar transition right now.”
00:04:47 | Randy Johnston | “The time to first attack after a vulnerability is exposed is well below an hour now.”
00:07:02 | Brian Tankersley | “We have pretty much the dream identity theft set of data.”
00:11:58 | Randy Johnston | “We are trying to have you think about how you stand up your defenses and how the attackers are trying to defeat your defenses or guardrails.”
00:16:59 | Brian Tankersley | “You really need to step up your cybersecurity posture now, because we’re going into a very bad neighborhood with very scary things going on.”
00:17:35 | Randy Johnston | “The attackers’ tools are actually dropping in cost very rapidly.”
00:18:17 | Brian Tankersley | “When these things are out, they’re out, and there’s no real coming back.”
00:20:17 | Brian Tankersley | “We have cheaper attacks, we have more targets. We have the machine speed shrinking the response time.”
00:21:09 | Randy Johnston | “It’s not Terminator and Skynet at this point.”
00:22:27 | Randy Johnston | “Get the fundamentals right, including testing the backups.”
00:23:33 | Randy Johnston | “If you’re waiting for things to be certain, that ain’t going to happen.”
00:25:12 | Randy Johnston | “Pollyanna Randy is suggesting that you may well have some really ugly conditions in front of you, and I’m trying to keep you out of the storm.”