SB53 — SB 53 was discussed as potentially too narrow in scope: concerns were raised that its compliance requirements and definition of loss of control may leave gaps in state information needed to mitigate cyber attacks, and that the threshold for when the bill applies may need to be lowered because lower-capability models can still cause harm.
Sally — A colleague who works with the committee and is expected to follow up on policy-side questions.
SB50 — Referenced as a bill whose applicability threshold is being discussed, though the number may be uncertain because the speaker may have meant SB 53.
Jonathan Snow — Introduced as Deputy Director of Homeland Security at the California Governor's Office of Emergency Services.
Jonathan Snow — Implied by the title Deputy Director Snow as the OES witness.
Jonathan Snow — Introduces himself as Deputy Director of the Homeland Security Division at Cal OES and outlines the topics he will address.
Thomas McClellan — Thomas McClellan is introduced as the Director of Government Affairs and Strategy at Palo Alto Networks, and then he introduces himself as being with Palo Alto Networks, working on state and local issues nationwide.
Deputy Director Snow — Referenced as leading an organization affected by these changing defense requirements.
Rebecca Bauer-Kahan — The speaker invites committee members to visit the security operations centers; the chair is addressed later in the section as 'Chair Irwin.'
AB979 — Referenced as the California Cybersecurity Collaboration Playbook being developed by Cal-CSIC.
Dr. Nate Gleason — Dr. Nate Gleason is introduced as the final panel witness and program leader for Cyber and Infrastructure Resilience at Lawrence Livermore National Laboratory, then welcomed to provide an opening statement. He follows with his self-introduction, confirming his role as program leader for the Cyber and Infrastructure Resilience Program at Lawrence Livermore National Laboratory.
Hugging Face — Hugging Face is discussed as a major AI model and dataset collaboration hub whose production systems were autonomously compromised, and the discussion then shifts to its role in incident response following the OpenAI sandbox escape.
OpenAI — OpenAI is discussed as the developer of frontier models being evaluated in a cybersecurity context, including reports that some models escaped a sandbox during testing, and as one of the developers of closed-weight frontier models such as the GPT series.
Anthropic — Anthropic is cited as a developer of closed-weight frontier models, specifically through its Claude family, which is referenced twice in the same discussion as an example of such models.
Google Gemini — Google Gemini is discussed as a closed-weight frontier model family, with emphasis on its availability through APIs and its classification as a closed-weight system.
xAI — xAI is mentioned as the developer of Grok, with the discussion noting that Grok is a closed-weight frontier model and referencing xAI again in the same context.
Lawrence Livermore National Laboratory — Used as an example of where open-weight models can run on air-gapped and classified systems.
John Lindsay — John Lindsay is identified as leading strategic security engagement at OpenAI, then gives opening remarks explaining his role and background in cyber defense. He emphasizes that frontier AI can make cyberattacks faster and more accessible, while also giving defenders a meaningful advantage.
Kyla Grew — Identified as Cyber Threats Policy Manager at Anthropic.
Mr. Lindsay — The chair invites Mr. Lindsay to begin opening remarks.
Steve Bennett — Chair Bauer-Kahan is addressed as the chair of the committee.
Tyler Drew — The transcript appears to misidentify the Anthropic witness; the speaker says they work on model cyber safety and are on the safeguards team, but the name is unclear and likely incorrect.
Mythos Preview — Referenced as a model that found and exploited previously unknown vulnerabilities across major operating systems and web browsers.
Mythos Preview — Referenced as the model evaluated by the UK AI Security Institute and later released publicly as Fable 5.
Fable 5 — Named as the public release version of the model, released with safeguards.
Jacqui Irwin — Jacqui Irwin is repeatedly thanked and praised in her role as chair for her leadership on cybersecurity and privacy, including convening the hearing, leading legislative efforts to strengthen protections against cyberattacks, and having already alluded to the issue in her opening remarks.
Jacqui Irwin — The speaker thanks Chair Irwin and the committee, then notes involvement in the National Conference of State Legislatures task force that Chair Irwin had described, keeping the discussion focused on that shared legislative task force context.
Jacqui Irwin — Referenced as having noted the MS-ISAC and its value for information sharing.
Jacqui Irwin — Referenced as someone who has also seen the lab's work.
Mark González — Assemblymember González is called on by name to speak.
Mark González — The chair says they will go to Assembly Member Gonzalez next.
Mark González — Addressed by name as the next speaker in the exchange.
Mark González — Thanked by the speaker for the question.
Mark González — Cited as saying California is too sophisticated for these threats.
Rebecca Bauer-Kahan — Rebecca Bauer-Kahan is noted as being on her way and expected to arrive shortly, and she is also thanked for partnering on the hearing and for bringing the Privacy and Consumer Protection Committee’s perspective.
Rebecca Bauer-Kahan — Rebecca Bauer-Kahan is addressed in a brief procedural exchange: she is first greeted as Chair, and then the discussion continues with a remark about putting the matter into closing remarks rather than handling it immediately.