What happened
NVIDIA notified customers that it detected unauthorized activity on its Brev cloud development platform between October 4 and 20. According to the company, some information stored on the platform may have been exposed to malicious actors, including the SSH keys set up by Brev.
Why SSH keys matter
SSH is a protocol for establishing secure connections to remote servers and virtual machines. Developers use it to manage servers, transfer files and run commands. Anyone who obtains a key could potentially take control of a VM, depending on its permissions and other security controls.
The company's response
NVIDIA said it rotated the affected SSH keys and updated customer machines with replacement keys. It says it found no evidence of improper use. However, it did not explain how attackers gained access or whether customer data or workloads were accessed.
The wider picture
The incident is part of a string of security problems at companies hosting AI development and cloud infrastructure services. A Wiz blog post published October 30, titled "Black October," identified at least nine platforms with incidents during the month. Wiz also shared two cases involving compromised Amazon Bedrock credentials: one generated about 800,000 API calls over 30 hours, another roughly 1.7 million calls over 13 hours, for a combined cost of $100,000 at list prices.
