{"version":1,"type":"story","url":"https://digestai.news/story/nvidias-brev-breach-may-have-exposed-ssh-keys-for-customer-vms","json":"https://digestai.news/story/nvidias-brev-breach-may-have-exposed-ssh-keys-for-customer-vms.json","markdown":"https://digestai.news/story/nvidias-brev-breach-may-have-exposed-ssh-keys-for-customer-vms.md","slug":"nvidias-brev-breach-may-have-exposed-ssh-keys-for-customer-vms","headline":"NVIDIA’s BREV breach may have exposed SSH keys for customer VMs","summary":"NVIDIA disclosed a security breach on its BREV cloud platform between October 4 and October 20, 2023. The company found unauthorized activity and says some SSH keys—used to access customer virtual machines—may have been exposed. NVIDIA replaced the affected keys and updated customer machines but found no evidence of misuse. The company did not explain how attackers gained access or whether customer data was accessed.\n\nThe incident follows a wave of security breaches in AI development platforms, per a report by Wiz titled *Black October*. Nine platforms, including Zeabur, Fireworks AI, and Lightning AI, faced targeted attacks on stored environment variables. One compromised Amazon Bedrock key led to 800,000 API calls over 30 hours, while another generated 1.7 million calls in 13 hours, costing roughly $100,000 at list prices. Experts warn that SSH-related breaches require isolating affected hosts, removing unauthorized keys, and rotating credentials.","keyPoints":["SSH keys for customer VM access may have been exposed, prompting NVIDIA to replace them","Wiz’s *Black October* report linked nine AI platforms to credential-targeted attacks, including Bedrock abuse costing $100,000"],"whyItMatters":"A breach exposing SSH keys risks unauthorized VM access, a growing threat in AI cloud platforms. The incident underscores the need for stricter credential management as attackers exploit stored environment variables for costly API abuse.","category":{"slug":"hardware","name":"Hardware & Compute","url":"https://digestai.news/category/hardware"},"entities":{"companies":["NVIDIA","Wiz","Zeabur","Fireworks AI","Lightning AI","Amazon"],"models":[],"people":["Bradford Regeski","Newton Gitonga"]},"firstPublishedAt":"2026-11-02T14:00:00Z","updatedAt":"2026-11-02T14:00:00Z","sourceCount":1,"hasPrimarySource":false,"sources":[{"outlet":"Tom's Hardware","title":"NVIDIA Brev security breach may have exposed SSH keys used to access customer VMs — investigation finds unauthorized activity spanning 16 days, but no evidence of misuse","url":"https://tomshardware.com/tech-industry/cyber-security/nvidia-brev-security-breach-may-have-exposed-ssh-keys-used-to-access-customer-vms-investigation-finds-unauthorized-activity-spanning-16-days-but-no-evidence-of-misuse","publishedAt":"2026-11-02T14:00:00Z","type":"press","primary":false,"lead":true}],"sourceNotes":null,"discussions":[],"thread":null,"cite":{"text":"Digest AI, \"NVIDIA’s BREV breach may have exposed SSH keys for customer VMs\", 2 November 2026, https://digestai.news/story/nvidias-brev-breach-may-have-exposed-ssh-keys-for-customer-vms","publisher":"Digest AI","title":"NVIDIA’s BREV breach may have exposed SSH keys for customer VMs","datePublished":"2026-11-02T14:00:00Z","url":"https://digestai.news/story/nvidias-brev-breach-may-have-exposed-ssh-keys-for-customer-vms"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}