recently detected unauthorized activity on its Brev cloud development platform occurring between October 4 and October 20. The company has notified affected customers that set up by Brev may have been exposed to malicious actors during this time.
In response, NVIDIA replaced the compromised SSH keys and updated customer machines with new credentials. While the company did not disclose how attackers gained access or if specific workloads were breached, they found no evidence of improper data usage so far.
This incident follows a report identifying nine AI platforms with security issues in October. As hackers increasingly leverage for supply chain attacks, major financial institutions have begun restricting AI access to sensitive customer accounts.