Treasury Lead

Lightning AI has appointed Peter Bershatsky as Vice President of Strategy and Business Development. He will lead the company's partnership strategy across hyperscalers, systems integrators and independent software vendors. Bershatsky brings over 20 years of experience in strategy and partnerships. He most recently served as Vice President of Corporate Business Development at Confluent, where he led Systems Integration partnerships and helped drive acquisitions of Immerok and Warpstream. He previously held senior roles at AWS, HP and Alteryx, and teaches tech M&A strategy at UC Berkeley's Haas School of Business. The appointment follows Lightning AI's January 2026 merger with Voltage Park, which combined its developer platform with over 36,000 NVIDIA GPUs across six US data centres.

LiveKit appoints Tom Davies as Chief Revenue Officer to accelerate enterprise growth. * May 21, 2026 This paid press release is brought to you from our partnership with EZ Newswire. The Post and Courier news staff was not involved in its creation. Davies joins as CRO alongside new sales, finance, and marketing leaders as LiveKit scales to meet accelerating enterprise demand for voice AI. SAN FRANCISCO, CA, May 21, 2026 (EZ Newswire) - LiveKit, the platform for building voice, video, and physical AI agents, today announced the appointment of Tom Davies as Chief Revenue Officer as the company expands its go-to-market leadership team to meet growing enterprise demand. More than 10% of the Fortune 500 already build on LiveKit today, and the expectation is that this accelerates with increased investment in both the go-to-market and platform. Davies joins LiveKit from Grafana Labs, where he served as VP of Sales for the West. Prior to Grafana, he spent more than six years at Snowflake leading vertical sales organizations across Media, Telecom, and Entertainment accounts throughout the U.S. At LiveKit, Davies will lead the company's global revenue organization as enterprises increasingly move AI agents from experimentation into production. "AI agents are quickly becoming core infrastructure for the enterprise, whether customer-facing or operating behind the scenes across internal workflows and systems," said Russ d'Sa, co-founder and CEO of LiveKit. "Tom has built and scaled enterprise revenue organizations at category-defining companies, and we're excited to have him leading our next phase of growth as more enterprises deploy voice AI applications and digital workers at scale." LiveKit provides the software frameworks and cloud infrastructure for building AI agents that can see, hear, and speak in real time, used by companies including SAP, Tesla, OpenAI, Salesforce, SpaceXAI, Spotify, and thousands of others, collectively facilitating billions of interactions each year. As businesses shift from chat-based interfaces to AI systems driven by voice, video, and computer vision, LiveKit is becoming a foundational infrastructure layer for teams building AI applications and digital workers. The company's platform combines open-source Agent SDKs for building voice and video agents with the global infrastructure needed to deploy and scale low-latency, stateful AI workloads in production. "Enterprises are moving beyond AI pilots and actively deploying production-ready AI systems," said Tom Davies, Chief Revenue Officer at LiveKit. "LiveKit has become foundational infrastructure for real-time AI experiences, and the opportunity ahead is enormous. I'm excited to help scale the business and partner with customers building the next generation of AI-powered applications and digital workers." Alongside Davies' appointment, LiveKit also announced the appointments of Megan Barros as Regional VP of Sales, Cameron Huang as VP of Finance, and Michelle Schroeder as VP of Marketing. Barros brings more than seven years of sales leadership experience from Snowflake and most recently served as Regional Sales Director for West Acquisition at Grafana Labs. Huang joins from Lightning AI, where he served as VP of Finance, and previously held roles at Eppo, Chime, and Centerview Partners. Schroeder joins from PolyAI, where she served as Chief Marketing Officer, bringing more than 13 years of experience leading marketing organizations at B2B technology companies. The appointments follow a period of strong momentum for LiveKit, including its $100 million Series C financing at a $1 billion valuation in January 2026. As enterprise adoption of real-time AI accelerates, LiveKit plans to continue expanding its team across departments. View open roles at livekit.com/careers. About LiveKit LiveKit is an end-to-end platform that gives developers everything they need to build and scale voice, video, and physical AI agents. Based in San Francisco, California, LiveKit powers some of the most widely used AI applications in the world. For more information, visit livekit.com. Media Contact Kathleen Eagan

PyTorch Lightning and intercom client suffer supply chain attack to steal credentials. By April 30, 2026 No Comments 4 Mins Read Ravi LakshmananApril 30, 2026Supply chain attacks/malware In yet another software supply chain attack, attackers compromised the popular Python package Lightning and pushed two malicious versions to perform credential theft. According to Aikido Security, OX Security, Socket, and StepSecurity, the two malicious versions are versions 2.6.2 and 2.6.3, both published on April 30, 2026. The campaign is being assessed as an extension of the Mini Shai-Hulud supply chain incident that targeted SAP-related npm packages on Wednesday. As of this writing, the project is isolated by the Python Package Index (PyPI) repository administrator. PyTorch Lightning is an open source Python framework that provides a high-level interface to PyTorch. This open source project has over 31,100 stars on GitHub. "The malicious package contains a hidden _runtime directory containing a downloader and an obfuscated JavaScript payload," Socket said. "The execution chain runs automatically when a Lightning module is imported, with no additional action required by the user after installation and import." This attack chain paves the way for a Python script ('start.py') to download and execute the Bun JavaScript runtime, which is used to execute an 11 MB obfuscated malicious payload ('router_runtime.js') for comprehensive credential theft. The project's management confirmed that "we are aware of this issue and are actively investigating it." It is not clear at this time how the incident occurred, but it has been suggested that the project's GitHub account may have been compromised. From the collected credentials, the GitHub token is validated against 'api.github'.[.]com/user" endpoint to inject a worm-like payload into up to 50 branches pulled from all repositories that the token can write to. "This operation is an upsert; it creates a file that doesn't yet exist and silently overwrites the file that does exist," Socket added. "No pre-checking of existing content is performed. All tainted commits are created using a hard-coded ID designed to impersonate Anthropic's Claude Code." Separately, the malware implements an npm-based propagation vector that modifies the developer's local npm package using a post-installation hook in the "package.json" file to invoke the malicious payload, increment the patch version number, and repack the .tgz tarball. When unwitting developers publish modified packages from their local environment, they become available on npm and from there malware can reach downstream user systems. In the meantime, FySelf Functionalities recommend blocking Lightning versions 2.6.2 and 2.6.3 and removing them from developer systems if they are already installed. It is also important to downgrade to the latest known clean version 2.6.1 and rotate any exposed credentials in the affected environment. This supply chain attack is the latest addition to a long list of breaches carried out by the threat actor known as TeamPCP. TeamPCP launched the Onion website on the dark web after its account was suspended by X for violating the platform's rules. He also praised LAPSUS$ as "a good partner of ours and has been deeply involved throughout this operation." The group also emphasized that it has "never used the VECT encryption tool and owns its own private locker, CipherForce," following a Check Point Research report on vulnerabilities discovered in the ransomware encryption process. Intercom npm packages compromised as part of Mini Shai-Hulud. In a related development, it was revealed that intercom-client version 7.0.4 was compromised as part of the mini Shai-Hulud campaign in a manner similar to SAP packages that used pre-installation hooks to trigger execution of credential-stealing malware. "This overlap is significant because the SAP CAP campaign was linked to TeamPCP activity based on shared technical details, including unique payload implementation patterns, GitHub-based leaks, credential harvesting across developer and CI/CD environments, and similarities to previous attacks impacting Checkmarx, Bitwarden, Telnyx, LiteLLM, and Aqua Security Trivy," Socket said.