For years, law firms have invested heavily in defending against remote cyberattacks. Firewalls, multifactor authentication, endpoint detection, email security, and employee awareness training have become standard components of modern cybersecurity programs. The underlying assumption has been that attackers would try to gain access through the firm’s technology infrastructure. Increasingly, however...