NVIDIA Brev security breach may have exposed SSH keys used to access customer VMs — investigation finds unauthorized activity spanning 16 days, but no evidence of misuse
NVIDIA is investigating a security incident involving its Brev cloud development platform after detecting unauthorized activity between October 4 and October 20. The incident may have exposed SSH keys used to access customer virtual machines. NVIDIA has rotated the affected keys and updated customer instances, but says it is unaware of any improper use
NVIDIA's BREV cloud development platform was targeted by hackers during October 4-20. According to a notification sent to affected customers, unauthorized activity occurred, and some accounts may have been exposed. The company identified unidentified activity on the platform, but has found no evidence of improper use. The compromised information included SSH keys used to access customer virtual machines.
The keys have been replaced, and customer machines updated with new ones. However, the company did not disclose how the attackers gained access or if customer data or workloads were accessed.
Written by urgent.news from Tom's Hardware's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
