NEW: OpenAI gives first detailed debrief of the Hugging Face incident at Black Hat conference In a session I attended today at Black Hat, OpenAI's Eric Wallace and Michael Dalton said the company is "consciously slowing down research to enhance security" while a full technical postmortem is still underway. * OpenAI traced the roots of the attack back to May 7, during training of an unreleased frontier model—not July. * The most surprising detail: AI agents accidentally created an internal message board, allowing separate evaluation runs to share exploits, discoveries and work assignments. * OpenAI said it shut the message board down after an internal security incident—only for the agents to independently recreate it days later using a different communication method. * OpenAI called the incident a "watershed moment" for AI security and warned that "agent orchestrated fully automated offensive attacks are real now." * The company also said it is "consciously slowing down research to enhance security" while overhauling its defenses.

Lightning AI supports open models ⚡️ And we've supported since 2019 when we created PyTorch Lightning that enabled a generation of researchers to build and train their own specialized models. We continue to double down on that mission ⚡️

Lightning AI supports open models ⚡️ And we've supported since 2019 when we created PyTorch Lightning that enabled a generation of researchers to build and train their own specialized models. We continue to double down on that mission ⚡️

Since 2019 we have been helping companies train and own their own specialized models. Really enjoyed sharing how @LightningAI is becoming THE enterprise platform that helps you do that - now with our own 40k GPUs ⚡️

25,000 H100s now available for on-demand! - instant startup - high availability - enterprise-grade reliability read why we are going to become the leading on-demand cloud

Today we're launching our own cloud with GPUs we own for the first time. Lightning up to now (like most other software ai platforms), has rented compute from others behind the scenes to power their products. today we're launching 25,000 H100s that we fully own and operate ourselves across our customer base. we can also build high performance clusters and are doing GB300, B200 and VR clusters right now. Request access now →

Yesterday we saw a supply-chain attack on PyTorch Lightning (on Pypi, not our core repo). It's wild how it happened but it was caught and quarantined within 42 minutes thanks to the open source community. It's one reason why open source actually helps increase the security posture of projects. Thank you to @pypi and @SocketSecurity ⚡️ Summary: On April 30th, 2026, an attacker captured PyPI credentials and used them to push compromised versions of PyTorch Lightning (PTL). These versions were live for 42 minutes before PTL community members alerted us and PyPI quarantined the package. The PyTorch Lightning GitHub source code repository was never compromised. This affected those who installed PTL via PyPI between 12:45:20 and 13:27:30 UTC on April 30th, 2026.

Thanks to the community for reporting security issues with PyTorch Lightning 2.6.2 and 2.6.3 - our team is looking into it. In the meantime, please use 2.6.1 until we publish 2.6.4. This is the beauty of open source and why our community keeps each other safe ⚡️.