Law firms in Australia have improved their cybersecurity in recent years but remain vulnerable to cybercriminals seeking to exploit their valuable data, experts say.