AI Security and the Law

Mayer Brown
  • 5.0 (6)
  • Business News

Welcome to AI Security and the Law, a podcast exploring the intersection of artificial intelligence and security, and associated legal issues. Each month, Mayer Brown partners Stephen Lilley and Veronica Glick interview leading experts to discuss what key trends mean for companies—and their legal teams. Stephen and Veronica also examine ways companies are navigating these issues while enabling AI-powered innovation.

Episodes

  1. 2d ago ·  Video

    Cybersecurity Awareness Month Special: 10 Questions For Assessing Where You Stand On Agentic AI Security

    In this episode of AI Security and The Law, hosts Stephen Lilley and Veronica Glick wrap up Cybersecurity Awareness Month with practical advice on agentic AI security. As companies allow agents to take increasingly consequential actions in their environments—from writing code to moving money—and agentic security incidents are front page news, the hosts offer ten questions in-house lawyers can ask their internal teams to see where the company stands on agentic security and to push it in the right direction. While companies are at different points on the journey of agentic adoption, the questions are intended to provide a starting point for lawyers as they work to ensure that security risks are managed appropriately. Shownotes:  2:18 Are high-risk agentic implementations subject to meaningful scrutiny and testing? 3:03 Have business leaders and engineering teams received training on risk mitigation? 4:22 Does the security team believe that appropriate security controls have been implemented? 5:27 Are the activities of AI agents logged and subject to alerting? 6:16 If the company needed to shut down or mitigate the actions of AI agents, would it be able to do so? 8:05 If an agentic incident occurred tomorrow, would it be possible to quickly assemble the right group of stakeholders, each of whom understands their role and responsibilities? 10:50 Is it broadly understood who has responsibility for critical containment decisions? 11:50 Do we have a documented plan for how to respond to an agentic incident, whether as part of the cyber incident response plan or in another document? 15:20 Have we practiced responding to likely scenarios, either through a formal tabletop exercise or more informal scenario-based sessions? 16:08 Do our contracts mitigate risk to the extent reasonably possible given market realities?

  2. Sep 29 ·  Video

    AI at Machine Speed: A CISO's Guide to Securing the Agentic Era

    In this episode, cybersecurity leader JJ Markee joins hosts Stephen and Veronica to discuss how AI is fundamentally reshaping the threat landscape and what Fortune 500 CISOs need to do about it. JJ emphasizes that while AI accelerates both attacks and defenses to machine speed, the core security fundamentals — endpoint coverage, secure configurations, identity management, and rapid patching — matter more than ever. The conversation explores critical emerging challenges such as non-human identity management for agentic workforces, the risks of "vibe coding," preparing for agent-swarm attacks, and navigating a rapidly evolving vendor landscape. JJ and the hosts also discuss the importance of early partnership between security and legal teams to build flexible AI governance models that enable business innovation without creating undue risk. Show Notes:  (00:02) Introduction to AI Security and the Law (01:25) Emerging AI-powered cyber threats (04:17) The three C's: coverage, configuration, and compliance (09:40) Why fundamentals matter more than ever (14:35) Incident response at agentic speed (23:17) Evaluating AI security tools (29:20) Prioritizing investments and aligning with business goals (34:45) Building flexible AI governance with legal partnerships

  3. Aug 21 ·  Video

    Blurred Lines: How AI Is Rewriting the Rules of Fraud, Identity, and Defense

    In this episode of AI Security and the Law, hosts Veronica Glick and Stephen Lilley speak with Amy Larsen, a technology policy and national security leader whose work has spanned across government, big law, and major tech companies, including Visa and Microsoft's Democracy Forward Initiative. They discuss how artificial intelligence is transforming the threat landscape for fraud, scams, cyberattacks, and disinformation – making them faster, cheaper, more personalized, and harder to detect. The conversation covers the blurring lines between attack categories, the rise of agentic AI and its implications for identity verification and liability, and the evolving patchwork of legal and regulatory responses in the U.S. and abroad. Larsen emphasizes that while existing legal frameworks provide a foundation, gaps remain – particularly around authorized push-payment fraud reimbursement, cross-jurisdictional coordination, and multi-agent transaction traceability.  She closes with practical guidance for companies and individuals, urging tabletop exercises, crisis preparation, and consistent digital hygiene as essential defenses. Show Notes: (00:02) Introduction to AI Security and the Law (04:40) "AI Security" Blurs Fraud, Scams, Disinfo, Cyberattacks (06:51) AI Fraud Losses: $15.9B, up 28% YoY (10:15) Cheap Deepfakes, Real-Time Video, Payment-App Scams (13:13) AI Empowers Amateurs and Organized Crime Alike (15:00) Agentic AI Challenges Delegated Authority and Liability (22:22) Policy Gaps in Reimbursement, Enforcement, State Definitions (27:04) Tabletop Exercises, MFA, Phishing Awareness, LE Relationships

  4. Jul 31 ·  Video

    Eight Years to Eight Weeks: Advanced AI Models are Reshaping Vulnerability Management

    In this episode, Stephen Lilley and Veronica Glick sit down with Eric Wenger, Cisco's Senior Director for Technology Policy, to discuss how frontier AI models are reshaping vulnerability management. Eric shares insights from Cisco's participation in Project Glasswing and Project Daybreak, including how advanced models helped the company review 1.8 billion lines of code in eight weeks rather than an estimated eight years, while keeping false positives to roughly 3%. The conversation covers the tension between granting defenders' early access to cutting-edge models and getting innovative technology to market quickly, government initiatives like the AI vulnerability clearinghouse, and why fundamentals like multi-factor authentication and least-privilege access remain more important than ever. Eric closes with a grounded take: rather than fearing a science-fiction AI takeover, organizations should focus on accelerating patch cycles and shoring up the basics that have always mattered. Show notes: (00:02) Introduction to AI Security and the Law (01:53) From Cybercrime Prosecutor to AI Security Leader  (05:25) The AI Inflection Point  (09:20) Cisco's Role in the AI Security Ecosystem  (10:50) Inside Project Glasswing and Project Daybreak  (12:05) What Cisco Learned: Speed, Accuracy, and the Right Model for the Job  (16:55) Rethinking Patch Cadence and Regulatory Expectations  (19:45) Government Initiatives: The AI EO and Project Gold Eagle  (23:00) Model Access, Scarcity, and Tools for Defenders  (29:00) Closing Thoughts: Back to Basics

  5. Jun 12

    The Executive Order on Advanced AI Innovation and Security: What Businesses Need to Know

    In this episode of AI Security and the Law, hosts Stephen Lilley and Veronica Glick sit down with Daniel Castro, President of the Information Technology and Innovation Foundation (ITIF), to unpack the latest executive order on artificial intelligence and cybersecurity. The conversation explores how AI is fundamentally changing the economics of cyberattacks, making it cheaper and easier for threat actors to exploit longstanding vulnerabilities at scale, and what the federal government's response means for critical infrastructure operators, state and local authorities, and private sector businesses alike. Castro offers insights on the executive order's three operative sections, including efforts to upgrade federal systems, the voluntary 30-day review process for frontier AI models, and the prioritization of criminal prosecution of AI-enabled cyber threats. The episode also touches on the broader policy landscape, including the bipartisan Great American AI Act, underscoring that this is a rapidly evolving area with significant implications for global businesses.

  6. May 27 ·  Video

    The Agentic Web: DNS, Security, and the Future for Cyber Lawyers

    In this episode of AI Security and the Law, hosts Stephen Lilley and Veronica Glick sit down with Wei Chen, Chief Legal Officer of Infoblox, to explore how the rise of agentic AI is reshaping internet infrastructure, cybersecurity, and the practice of law. Wei explains how the Domain Name System—the internet's foundational routing layer—can play an important role in securing autonomous AI agents, and she discusses Infoblox's DNS-AID proposal to the Internet Engineering Task Force as a path toward open, decentralized governance of the agentic web. The conversation also covers practical advice for lawyers, including building technical fluency with AI tools and embracing disruption as an opportunity for growth.

  7. Apr 16

    Supercharged Threats, Automated Defenses: AI's Double-Edged Sword

    In this kickoff episode of AI Security and the Law, hosts Stephen Lilley and Veronica Glick welcome cybersecurity leader Jeff Greene of Civira Partners—a veteran of DHS' Cybersecurity Infrastructure and Security Agency, the National Security Council in the White House, NIST, the Senate, and various private sector roles—for a wide-ranging conversation on AI and security. They discuss implications for businesses of AI models enabling vulnerability exploitation at unprecedented speed and scale; meeting the moment through rapid AI adoption while limiting security debt and associated legal risks; and why foundational cybersecurity practices and resilience remain critical even as companies manage distinctive threats to AI tools. While expecting the cat-and-mouse dynamic between attackers and defenders to continue, Jeff argues that organizations should prepare to cede more decision-making to automated defenses that operate at machine speed and adjust their cybersecurity programs to meet this new reality.

  • 7 Episodes

Ratings & Reviews

5
out of 5
6 Ratings

About

Welcome to AI Security and the Law, a podcast exploring the intersection of artificial intelligence and security, and associated legal issues. Each month, Mayer Brown partners Stephen Lilley and Veronica Glick interview leading experts to discuss what key trends mean for companies—and their legal teams. Stephen and Veronica also examine ways companies are navigating these issues while enabling AI-powered innovation.

Information

  • Creator
    Mayer Brown
  • Years Active
    2026
  • Episodes
    7
  • Rating
    Clean
  • Copyright
    ©2026 Mayer Brown
  • Show Website
    AI Security and the Law

You Might Also Like