Bftcpa606: Created page with "= ATL272 - The Gathering Storm = '''Episode:''' ATL272
'''Title:''' ''The Gathering Storm''
'''Hosts:''' Randy Johnston and Brian F. Tankersley, CPA.CITP, CGMA
'''Podcast:''' Accounting Technology Lab, brought to you by CPA Practice Advisor == Promotional Hook == AI is making cyberattacks faster, cheaper, and more scalable at exactly the time many accounting firms are carrying too much technical debt. ATL272 examines what firms should do before that combin..."

2026-08-21T16:49:42Z

Created page with "= ATL272 - The Gathering Storm = '''Episode:''' ATL272 '''Title:''' ''The Gathering Storm'' '''Hosts:''' Randy Johnston and Brian F. Tankersley, CPA.CITP, CGMA '''Podcast:''' Accounting Technology Lab, brought to you by CPA Practice Advisor == Promotional Hook == AI is making cyberattacks faster, cheaper, and more scalable at exactly the time many accounting firms are carrying too much technical debt. ATL272 examines what firms should do before that combin..."

New page

= ATL272 - The Gathering Storm =

'''Episode:''' ATL272 
'''Title:''' ''The Gathering Storm'' 
'''Hosts:''' Randy Johnston and Brian F. Tankersley, CPA.CITP, CGMA 
'''Podcast:''' Accounting Technology Lab, brought to you by CPA Practice Advisor

== Promotional Hook ==

AI is making cyberattacks faster, cheaper, and more scalable at exactly the time many accounting firms are carrying too much technical debt. ATL272 examines what firms should do before that combination turns into a very expensive problem.

''Quote timestamps come from the supplied SRT transcript and should correspond to the video if the audio and video edits are identical.''

== Episode Summary ==

In ATL272, “The Gathering Storm,” Randy Johnston and Brian Tankersley argue that AI is changing cybersecurity faster than many accounting firms are changing their defenses. The issue is not simply smarter phishing or more malware. AI can automate reconnaissance, vulnerability discovery, exploit development, credential testing, and lateral movement at machine speed, while open-weight models and falling token costs may make those capabilities cheaper and more widely available. That matters especially for CPA firms because they hold an unusually valuable combination of tax data, identity information, client credentials, banking access, payment authority, and long-retained documents.

The hosts also point to a dangerous mismatch: attackers are getting faster while many firms still rely on home-grade routers, unsupported operating systems, aging hardware, and definition-based security tools. Human error remains a major weakness, when convincing phishing messages land during stressful periods.

Their recommendation is practical: harden systems now, eliminate unsupported technology, rehearse incident response, shorten detection-to-containment time, test backup restores, inventory every AI tool and agent in the firm, map where client data goes, inspect audit trails, and maintain control of firm data. The takeaway is caution without panic: this is not “Terminator and Skynet,” but waiting for certainty is not a cybersecurity strategy.

== Pull Quotes ==

{| class="wikitable"
! Time
! Speaker
! Quote
|-
| 00:01:07
| Randy Johnston
| “We want you to start being proactive now on protecting your businesses.”
|-
| 00:02:32
| Brian Tankersley
| “I think that security is going through a similar transition right now.”
|-
| 00:04:47
| Randy Johnston
| “The time to first attack after a vulnerability is exposed is well below an hour now.”
|-
| 00:07:02
| Brian Tankersley
| “We have pretty much the dream identity theft set of data.”
|-
| 00:11:58
| Randy Johnston
| “We are trying to have you think about how you stand up your defenses and how the attackers are trying to defeat your defenses or guardrails.”
|-
| 00:16:59
| Brian Tankersley
| “You really need to step up your cybersecurity posture now, because we’re going into a very bad neighborhood with very scary things going on.”
|-
| 00:17:35
| Randy Johnston
| “The attackers’ tools are actually dropping in cost very rapidly.”
|-
| 00:18:17
| Brian Tankersley
| “When these things are out, they’re out, and there’s no real coming back.”
|-
| 00:20:17
| Brian Tankersley
| “We have cheaper attacks, we have more targets. We have the machine speed shrinking the response time.”
|-
| 00:21:09
| Randy Johnston
| “It’s not Terminator and Skynet at this point.”
|-
| 00:22:27
| Randy Johnston
| “Get the fundamentals right, including testing the backups.”
|-
| 00:23:33
| Randy Johnston
| “If you’re waiting for things to be certain, that ain’t going to happen.”
|-
| 00:25:12
| Randy Johnston
| “Pollyanna Randy is suggesting that you may well have some really ugly conditions in front of you, and I’m trying to keep you out of the storm.”
|}

=== Suggested Short-Video Clips ===

The strongest clips for Shorts/Reels are '''00:16:59''', '''00:20:17''', '''00:22:27''', and '''00:25:12'''. The final quote is particularly useful because it ties directly to the episode title.

== Social Media Posts ==

# '''AI isn’t just making attackers smarter. It’s making them faster, cheaper, and able to work in parallel.''' ATL272 asks the question every accounting firm should be asking: Is your cybersecurity posture keeping up? #AccountingTech #Cybersecurity #AI
# CPA firms don't just hold data. They hold '''identity information, tax records, bank details, credentials, payment authority, and access to client systems.''' That makes accounting firms unusually attractive cyber targets. ATL272: ''The Gathering Storm.''
# Your incident response plan isn't a compliance document to put on a shelf. '''It's a fire drill. Rehearse it before you need it.''' #CPA #Cybersecurity
# '''Backups don't count until you've tested the restore.''' One of the simplest recommendations in ATL272 may also be one of the most important.
# The cyber response window is shrinking. When attackers operate at machine speed, '''“we'll patch it next week” becomes a business risk.''' ATL272 examines why.
# '''Technical debt is becoming security debt.''' Unsupported operating systems, aging hardware, and consumer-grade network equipment become much bigger liabilities when attacks can be automated.
# Open-weight AI changes the economics of cybersecurity. Powerful capabilities can become '''cheaper, portable, replicable, and difficult to contain once they're released.'''
# Security that works is largely invisible. Security that fails can stop the business. That's why cybersecurity spending is difficult to appreciate—'''right up until the moment you desperately wish you had spent it.'''
# AI may make phishing better, but the human layer hasn't disappeared. A convincing message delivered to a tired, distracted professional can defeat a lot of expensive technology.
# '''Inventory your AI stack.''' Which applications and agents touch client data? Where does the data go? What do your audit trails show? Who controls that information afterward? ATL272 gets into the governance questions behind the AI boom.
# If your cybersecurity strategy begins and ends with traditional antivirus, '''the game has changed.''' ATL272 looks at why accounting firms need more proactive detection, response, and containment.
# Tax season is a terrible time to discover that your router, server, operating system, or other critical infrastructure is unsupported. '''Fix the boring infrastructure before the storm arrives.'''
# “'''We have cheaper attacks, we have more targets. We have the machine speed shrinking the response time.'''” That's the cybersecurity business problem behind ATL272.
# “'''Get the fundamentals right, including testing the backups.'''” Sophisticated AI security tools won't compensate for sloppy cybersecurity basics.
# “'''If you're waiting for things to be certain, that ain't going to happen.'''” Cybersecurity decisions rarely arrive with perfect information. Waiting is still a decision.
# '''Not Skynet. Still serious.''' ATL272 avoids the science-fiction answer and focuses on the operational problem: AI is reducing the cost and increasing the speed of cyberattacks.
# Accounting firms sit at the intersection of '''money movement, identity data, tax records, and client-system credentials.''' That's a high-value target whether we like it or not.
# There's a governance problem hiding inside the cybersecurity problem: '''Which AI vendors can access your client data, what happens to it, and can you prove it?'''
# A cybersecurity policy isn't resilience. '''Rehearsed incident response, tested backups, supported systems, useful audit trails, and controlled data flows are resilience.'''
# ''The Gathering Storm'' is a warning, not a prediction of doom. Use the time you have now to '''harden, patch, rehearse, test, inventory, and govern.''' ATL272 from the Accounting Technology Lab. #CPA #AccountingTechnology #Cybersecurity

== Companies, Products, and Services Mentioned ==

{| class="wikitable sortable"
! Company / Service
! Products or Context Mentioned
! X
! Facebook
! LinkedIn
! Instagram
|-
| CPA Practice Advisor
| Publisher/sponsor of Accounting Technology Lab
| @cpapracadvisor
| CPA Practice Advisor
| CPA Practice Advisor
| Not independently verified
|-
| OpenAI
| ChatGPT; GPT models; GPT 5.2
| @OpenAI; @ChatGPTapp
| @OpenAI
| OpenAI
| @openai; @chatgpt
|-
| Hugging Face
| AI model hosting/community platform
| @huggingface
| Not verified
| Hugging Face
| Not verified
|-
| Anthropic
| Claude; Claude Code; Mythos; Fable; Project Glasswing referenced
| @AnthropicAI; @claudeai
| Not verified
| Anthropic
| Not verified
|-
| Microsoft
| Vulnerability patching; operating systems; security
| @Microsoft
| Microsoft
| Microsoft
| @microsoft
|-
| Ubiquiti
| Networking/infrastructure equipment; rendered as “Ubiquity” in transcript
| @Ubiquiti
| Ubiquiti/UI
| Ubiquiti Inc.
| @ubiquiti
|-
| Cisco
| Networking/infrastructure vendor
| @Cisco
| Cisco
| Cisco
| @cisco
|-
| Google DeepMind
| Frontier AI/model-development discussion
| @GoogleDeepMind
| Google DeepMind
| Google DeepMind
| @googledeepmind
|-
| DeepSeek
| Open-model comparison
| @deepseek_ai
| No official account verified
| No official account verified
| No official account verified
|-
| Z.ai
| GLM models; GLM 5.2
| @Zai_org
| Not verified
| Z.ai
| Not verified
|-
| GitHub
| Distribution/hosting of open-source or open-weight material
| @github
| GitHub
| GitHub
| Not independently verified
|-
| Reddit
| Distribution example for model weights/configurations
| @Reddit
| @reddit
| Reddit, Inc.
| @reddit
|-
| Yandex
| Example of another redistribution location
| @yandexcom
| Not independently verified
| Yandex
| Not independently verified
|-
| BitTorrent
| Peer-to-peer distribution analogy
| @BitTorrent
| Not independently verified
| BitTorrent, Inc.
| Not independently verified
|}

== Other Organizations, Technologies, and Regulatory Concepts Referenced ==

* AICPA
* CPAmerica
* Stanford
* U.S. Department of Defense
* NSA
* GLBA
* Written Information Security Plans (WISPs)
* Model Context Protocol (MCP)
* CVEs
* Open-source/open-weight AI models
* AI agents
* Incident response
* Antivirus and endpoint security
* Backups and disaster recovery
* Routers and networking infrastructure
* Operating systems
* ACH and wire-transfer systems

== Transcript Note ==

One passage discussing an earlier state-linked AI campaign contains the phrase '''“Pageantic coding tool.”''' The supplied transcript does not establish that as a company or product name, so no entity has been inferred or added to the social-media table.

ATL272 - Revision history