Decrypted

Hugging Face and the ‘Rogue AI’ Question — With the FT’s Elaine Moore

In this episode, the hosts unpack the recent Hugging Face security incident involving AI agents tested by OpenAI — what happened, why it matters and the key takeaways for companies deploying agents. David Simon and William Ridgway, co-heads of Skadden's Cybersecurity and Data Privacy Practice, discuss takeaways for companies deploying agents. They also cover a White House framework for private companies to join government-directed cyber operations and the Cyber Resilience Act's 24-hour reporting clock. Elaine Moore, Tech Comment Editor at the Financial Times, joins the conversation to discuss whether human oversight can keep pace with AI agents. Tune in for insights on what it will take to earn trust in AI-generated content and the developments executives should watch out for over the next year. Connect and Learn More ☑️ Elaine Moore | LinkedIn ☑️ Financial Times ☑️ David Simon | LinkedIn ☑️ William Ridgway | LinkedIn ☑️ Skadden | LinkedIn | X | Facebook ☑️ Subscribe Apple Podcasts | Spotify “Decrypted” is a podcast by Skadden, Arps, Slate, Meagher & Flom LLP, and Affiliates. This podcast is provided for educational and informational purposes only and is not intended and should not be construed as legal advice. This podcast is considered advertising under applicable state laws.

• Transcript

California Raises the Bar on Cybersecurity

California's new mandatory risk assessment and cybersecurity audit rules create two distinct compliance regimes for businesses, with deadlines closer than they may appear. Skadden cybersecurity and data privacy counsel Lisa V. Zivkovic joins hosts David Simon and William Ridgway, co-heads of the firm’s global cybersecurity and data privacy practice, to break down risk assessment and cyber audit obligations, certifying officer selection, privilege considerations and practical next steps for general counsel and chief privacy officers. They also cover the FTC's AI accuracy proposal, a new AI cyber defense executive order, and the Supreme Court's Slaughter decision and its implications for EU-U.S. data transfers. Connect and Learn More ☑️ Lisa V. Zivkovic | LinkedIn ☑️ David Simon | LinkedIn ☑️ William Ridgway | LinkedIn ☑️ Skadden | LinkedIn | X | Facebook ☑️ Subscribe Apple Podcasts | Spotify “Decrypted” is a podcast by Skadden, Arps, Slate, Meagher & Flom LLP, and Affiliates. This podcast is provided for educational and informational purposes only and is not intended and should not be construed as legal advice. This podcast is considered advertising under applicable state laws.

• Transcript

Mythos, Glasswing and the View From the UK GCHQ

Hosts David Simon and William Ridgway welcome Skadden colleague Nicola Kerr-Shaw to discuss how AI vulnerability discovery tools such as Anthropic's Mythos are compressing the timelines around vulnerability discovery, exploitation and remediation, and what that means for board oversight, disclosure obligations and incident response planning. In the second half of the episode, Shehzad Charania, director of legal affairs and policy at GCHQ, shares the U.K. government's assessment that frontier AI is materially changing the cyber threat landscape by increasing the speed and scale at which vulnerabilities can be found. He explains that organizations that have not addressed their cybersecurity fundamentals and technical debt will be increasingly exposed and warns of a coming wave of forced corrections across the technology ecosystem as AI accelerates the discovery of flaws that must be remediated. His message to boards: make cyber a board-level responsibility, prioritize resilience and plan now to deploy updates quickly and at scale. Connect and Learn More ☑️ Shehzad Charania | LinkedIn ☑️ GCHQ on LinkedIn ☑️ Nicola Kerr-Shaw | LinkedIn ☑️ Skadden ☑️ David Simon | LinkedIn ☑️ William Ridgway | LinkedIn ☑️ Skadden | LinkedIn | X | Facebook ☑️ Subscribe Apple Podcasts | Spotify “Decrypted” is a podcast by Skadden, Arps, Slate, Meagher & Flom LLP, and Affiliates. This podcast is provided for educational and informational purposes only and is not intended and should not be construed as legal advice. This podcast is considered advertising under applicable state laws.

• Transcript

Decoding NIS2: Europe's New Cybersecurity Playbook

In this episode of "Decrypted," Skadden's cybersecurity and data privacy co-leads David Simon and William Ridgway sit down with Nicola Kerr-Shaw in London and Susanne Werry in Frankfurt for a frontline look at NIS2 — the EU directive redefining how organizations must prepare for and report cyber incidents across Europe and beyond. After a quick survey of recent U.S. cyber and AI policy developments, the team dives into what happens when an incident strikes under NIS2 — from the directive's dramatically expanded scope and strict notification deadlines to registration pitfalls, board-level personal liability and the challenge of preserving legal privilege under pressure.The episode wraps with practical takeaways on tabletop exercises, incident response planning and key U.K. developments, including the proposed Cybersecurity and Resilience Bill. Connect and Learn More ☑️ Nicola Kerr-Shaw | LinkedIn ☑️ Susanne Werry | LinkedIn ☑️ David Simon | LinkedIn ☑️ William Ridgway | LinkedIn ☑️ Skadden | LinkedIn | X | Facebook ☑️ Subscribe Apple Podcasts | Spotify “Decrypted” is a podcast by Skadden, Arps, Slate, Meagher & Flom LLP, and Affiliates. This podcast is provided for educational and informational purposes only and is not intended and should not be construed as legal advice. This podcast is considered advertising under applicable state laws.

• Transcript

Decrypted: The First 72 Hours of a Ransomware Attack

Cybersecurity is a team sport — and in the first 72 hours of a ransomware attack, every decision counts. In this inaugural episode of “Decrypted,” David Simon and William Ridgway, co-heads of Skadden's Cybersecurity and Data Privacy Practice, walk listeners through a realistic triple-extortion ransomware incident scenario — from the moment a security operations center flags unusual outbound traffic and ransom notes start appearing to the legal, regulatory and communications decisions that follow. Tune in for their insights about what separates companies that weather these crises from those that don't. "Decrypted" is your go-to resource for scenario-based discussions, regulatory and enforcement deep dives, and interviews with experienced practitioners and thought leaders in the cybersecurity and data privacy space. Each episode will track how cyber, privacy and AI risks show up in real life — inside incident response calls, board discussions, regulator interactions and litigation strategies. Connect and Learn More ☑️ David Simon | LinkedIn ☑️ William Ridgway | LinkedIn ☑️ Skadden | LinkedIn | X | Facebook ☑️ Subscribe Apple Podcasts | Spotify “Decrypted” is a podcast by Skadden, Arps, Slate, Meagher & Flom LLP, and Affiliates. This podcast is provided for educational and informational purposes only and is not intended and should not be construed as legal advice. This podcast is considered advertising under applicable state laws.

• Transcript

Welcome to Decrypted

Welcome to Decrypted! A podcast exploring the latest events in cybersecurity, data privacy, technology, and government. It features a roundup of the latest events in cybersecurity, data privacy, technology, and government, as well as interviews with key opinion leaders and other experts. Hosted by members of Skadden’s Cybersecurity & Data Privacy Practice. The views expressed are their own and do not reflect the views of Skadden or its clients. Disclaimer: Decrypted is a podcast by Skadden, Arps, Slate, Meagher & Flom LLP, and Affiliates. This podcast is provided for educational and informational purposes only and is not intended and should not be construed as legal advice. This podcast is considered advertising under applicable state laws.