
Free Daily Podcast Summary
by Mayer Brown
Welcome to AI Security and the Law, a podcast exploring the intersection of artificial intelligence and security, and associated legal issues. Each month, Mayer Brown partners Stephen Lilley and Veronica Glick interview leading experts to discuss what key trends mean for companies—and their legal teams. Stephen and Veronica also examine ways companies are navigating these issues while enabling AI-powered innovation.
The most recent episodes — sign up to get AI-powered summaries of each one.
In this episode of AI Security and The Law, hosts Stephen Lilley and Veronica Glick wrap up Cybersecurity Awareness Month with practical advice on agentic AI security. As companies allow agents to take increasingly consequential actions in their environments—from writing code to moving money—and agentic security incidents are front page news, the hosts offer ten questions in-house lawyers can ask their internal teams to see where the company stands on agentic security and to push it in the right direction. While companies are at different points on the journey of agentic adoption, the questions are intended to provide a starting point for lawyers as they work to ensure that security risks are managed appropriately. Shownotes: 2:18 Are high-risk agentic implementations subject to meaningful scrutiny and testing? 3:03 Have business leaders and engineering teams received training on risk mitigation? 4:22 Does the security team believe that appropriate security controls have been implemented? 5:27 Are the activities of AI agents logged and subject to alerting? 6:16 If the company needed to shut down or mitigate the actions of AI agents, would it be able to do so? 8:05 If an agentic incident occurred tomorrow, would it be possible to quickly assemble the right group of stakeholders, each of whom understands their role and responsibilities? 10:50 Is it broadly understood who has responsibility for critical containment decisions? 11:50 Do we have a documented plan for how to respond to an agentic incident, whether as part of the cyber incident response plan or in another document? 15:20 Have we practiced responding to likely scenarios, either through a formal tabletop exercise or more informal scenario-based sessions? 16:08 Do our contracts mitigate risk to the extent reasonably possible given market realities?
In this episode, cybersecurity leader JJ Markee joins hosts Stephen and Veronica to discuss how AI is fundamentally reshaping the threat landscape and what Fortune 500 CISOs need to do about it. JJ emphasizes that while AI accelerates both attacks and defenses to machine speed, the core security fundamentals — endpoint coverage, secure configurations, identity management, and rapid patching — matter more than ever. The conversation explores critical emerging challenges such as non-human identity management for agentic workforces, the risks of "vibe coding," preparing for agent-swarm attacks, and navigating a rapidly evolving vendor landscape. JJ and the hosts also discuss the importance of early partnership between security and legal teams to build flexible AI governance models that enable business innovation without creating undue risk. Show Notes: Introduction to AI Security and the Law Emerging AI-powered cyber threats The three C's: coverage, configuration, and compliance Why fundamentals matter more than ever Incident response at agentic speed Evaluating AI security tools Prioritizing investments and aligning with business goals Building flexible AI governance with legal partnerships
In this episode of AI Security and the Law, hosts Veronica Glick and Stephen Lilley speak with Amy Larsen, a technology policy and national security leader whose work has spanned across government, big law, and major tech companies, including Visa and Microsoft's Democracy Forward Initiative. They discuss how artificial intelligence is transforming the threat landscape for fraud, scams, cyberattacks, and disinformation – making them faster, cheaper, more personalized, and harder to detect. The conversation covers the blurring lines between attack categories, the rise of agentic AI and its implications for identity verification and liability, and the evolving patchwork of legal and regulatory responses in the U.S. and abroad. Larsen emphasizes that while existing legal frameworks provide a foundation, gaps remain – particularly around authorized push-payment fraud reimbursement, cross-jurisdictional coordination, and multi-agent transaction traceability. She closes with practical guidance for companies and individuals, urging tabletop exercises, crisis preparation, and consistent digital hygiene as essential defenses. Show Notes: Introduction to AI Security and the Law "AI Security" Blurs Fraud, Scams, Disinfo, Cyberattacks AI Fraud Losses: $15.9B, up 28% YoY Cheap Deepfakes, Real-Time Video, Payment-App Scams AI Empowers Amateurs and Organized Crime Alike Agentic AI Challenges Delegated Authority and Liability Policy Gaps in Reimbursement, Enforcement, State Definitions Tabletop Exercises, MFA, Phishing Awareness, LE Relationships
In this episode, Stephen Lilley and Veronica Glick sit down with Eric Wenger, Cisco's Senior Director for Technology Policy, to discuss how frontier AI models are reshaping vulnerability management. Eric shares insights from Cisco's participation in Project Glasswing and Project Daybreak, including how advanced models helped the company review 1.8 billion lines of code in eight weeks rather than an estimated eight years, while keeping false positives to roughly 3%. The conversation covers the tension between granting defenders' early access to cutting-edge models and getting innovative technology to market quickly, government initiatives like the AI vulnerability clearinghouse, and why fundamentals like multi-factor authentication and least-privilege access remain more important than ever. Eric closes with a grounded take: rather than fearing a science-fiction AI takeover, organizations should focus on accelerating patch cycles and shoring up the basics that have always mattered. Show notes: Introduction to AI Security and the Law From Cybercrime Prosecutor to AI Security Leader The AI Inflection Point Cisco's Role in the AI Security Ecosystem Inside Project Glasswing and Project Daybreak What Cisco Learned: Speed, Accuracy, and the Right Model for the Job Rethinking Patch Cadence and Regulatory Expectations Government Initiatives: The AI EO and Project Gold Eagle Model Access, Scarcity, and Tools for Defenders Closing Thoughts: Back to Basics
In this episode of AI Security and the Law, hosts Stephen Lilley and Veronica Glick sit down with Daniel Castro, President of the Information Technology and Innovation Foundation (ITIF), to unpack the latest executive order on artificial intelligence and cybersecurity. The conversation explores how AI is fundamentally changing the economics of cyberattacks, making it cheaper and easier for threat actors to exploit longstanding vulnerabilities at scale, and what the federal government's response means for critical infrastructure operators, state and local authorities, and private sector businesses alike. Castro offers insights on the executive order's three operative sections, including efforts to upgrade federal systems, the voluntary 30-day review process for frontier AI models, and the prioritization of criminal prosecution of AI-enabled cyber threats. The episode also touches on the broader policy landscape, including the bipartisan Great American AI Act, underscoring that this is a rapidly evolving area with significant implications for global businesses.
In this episode of AI Security and the Law, hosts Stephen Lilley and Veronica Glick sit down with Wei Chen, Chief Legal Officer of Infoblox, to explore how the rise of agentic AI is reshaping internet infrastructure, cybersecurity, and the practice of law. Wei explains how the Domain Name System—the internet's foundational routing layer—can play an important role in securing autonomous AI agents, and she discusses Infoblox's DNS-AID proposal to the Internet Engineering Task Force as a path toward open, decentralized governance of the agentic web. The conversation also covers practical advice for lawyers, including building technical fluency with AI tools and embracing disruption as an opportunity for growth.
In this kickoff episode of AI Security and the Law, hosts Stephen Lilley and Veronica Glick welcome cybersecurity leader Jeff Greene of Civira Partners—a veteran of DHS' Cybersecurity Infrastructure and Security Agency, the National Security Council in the White House, NIST, the Senate, and various private sector roles—for a wide-ranging conversation on AI and security. They discuss implications for businesses of AI models enabling vulnerability exploitation at unprecedented speed and scale; meeting the moment through rapid AI adoption while limiting security debt and associated legal risks; and why foundational cybersecurity practices and resilience remain critical even as companies manage distinctive threats to AI tools. While expecting the cat-and-mouse dynamic between attackers and defenders to continue, Jeff argues that organizations should prepare to cede more decision-making to automated defenses that operate at machine speed and adjust their cybersecurity programs to meet this new reality.
Welcome to AI Security and the Law, a podcast exploring the intersection of artificial intelligence and security, and associated legal issues. Each month, Mayer Brown partners Stephen Lilley and Veronica Glick interview leading experts to discuss what key trends mean for companies—and their legal teams. Stephen and Veronica also examine ways companies are navigating these issues while enabling AI-powered innovation.
AI-powered recaps with compact key takeaways, quotes, and insights.
Get key takeaways from AI Security and the Law in a 5-minute read.
Stay current on your favorite podcasts without falling behind.
It's a free AI-powered email that summarizes new episodes of AI Security and the Law as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by Mayer Brown.
Absolutely! The free plan covers up to 3 podcasts, any in the catalog. Basic raises that to 15, Pro to 40 and Max to 100. Browse our full catalog at /podcasts.
AI Security and the Law covers topics including News, Business. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.