NVIDIA’s BREV breach may have exposed SSH keys for customer VMs
NVIDIA disclosed a security breach on its BREV cloud platform between October 4 and October 20, 2023. The company found unauthorized activity and says some SSH keys—used to access customer virtual machines—may have been exposed. NVIDIA replaced the affected keys and updated customer machines but found no evidence of misuse. The company did not explain how attackers gained access or whether…
Key points
- SSH keys for customer VM access may have been exposed, prompting NVIDIA to replace them
- Wiz’s *Black October* report linked nine AI platforms to credential-targeted attacks, including Bedrock abuse costing $100,000
The incident follows a wave of security breaches in AI development platforms, per a report by Wiz titled Black October. Nine platforms, including Zeabur, Fireworks AI, and Lightning AI, faced targeted attacks on stored environment variables. One compromised Amazon Bedrock key led to 800,000 API calls over 30 hours, while another generated 1.7 million calls in 13 hours, costing roughly $100,000 at list prices. Experts warn that SSH-related breaches require isolating affected hosts, removing unauthorized keys, and rotating credentials.
NVIDIA Brev security breach may have exposed SSH keys used to access customer VMs — investigation finds unauthorized activity spanning 16 days, but no evidence of misuse
Tom's Hardware · 2 November 2026
Loading the full article…
This text was published by Tom's Hardware and written by Newton Gitonga. It is reproduced here with attribution so you can read it in full; the rights remain with the publisher. Read it at the source ↗
The headline, key points and digest above were generated by Digest AI's editorial model from the linked sources. Automated summaries can contain errors: the sources are the record. Spotted a mistake? Tell us. Published by Martin K., who runs Digest AI and handles corrections.
More in Hardware & Compute
All →- Marvell to buy Lumentum in $115 billion all-stock deal to boost AI connectivity · 1 src
- Signia makes MaX and Active Mini IX available for US veterans and military · 1 src
- Emerald AI joins EPRI’s DCFlex Initiative as full member after six grid-flexibility demos · 1 src
- OpenAI CEO Sam Altman says home PC RAM is quite terrible for global allocation · 9 src
- Google energy chief says space data centers cost 100 times more · 1 src
Comments
via GitHub Discussions