NVIDIA replaces potentially exposed SSH keys after detecting unauthorized activity on its Brev cloud platform
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works .
The company has already replaced the affected SHH keys and updated customer machines with new ones but says they found no evidence of improper use. “We are writing to inform you that NVIDIA Corporation has experienced a security incident that may have affected the security of your data," the notification reads. “Our analysis determined that your information from our Brev network may have been affected. This SSH key has since been rotated, and your instances have been updated with the replacement key.”
However, the company fell short of explaining how the attackers gained access, or whether anyone attempted to use the compromised data. Moreover, it has not disclosed whether customer data or workloads were accessed. SSH is a protocol used to establish a secure connection between ‘virtual machines’ or remote computers working together. Developers or system administrators can use it to manage remote servers, transfer files, and execute commands without needing physical access to the machine—much like AnyDesk or TeamViewer, but now for developers. Brev uses SSH keys to help customers access these services in the cloud, meaning if attackers access these keys, they could potentially take control of a virtual machine, depending on its specific permissions and other security controls.
And now @NVIDIAAI Brev also got a security breach. At this point in time, every major tech company is going through some sort of security issues – CVEs, stolen keys/API, credentials of users 🥲 https://t.co/3VgUZriQ7l October 30, 2026
The incident comes as several firms hosting AI development services and cloud infrastructure grapple with mounting security incidents involving customer credentials. On October 30, cybersecurity firm Wiz released a blog dubbed ‘Black October’ for AI developer platforms. The firm identified at least nine platforms that have had security incidents during the month, including Zeabur, Fireworks AI, Lightning AI, Opencode, Warp, Northflank, among others. As per the firm, the incidents were recurrent, with researchers noting that “all public reports highlight targeted exploitation, explicitly hunting stored environment variables, with a focus on those granted AI access.” Wiz further shared two cases involving compromised Amazon Bedrock credentials where, in one, attackers generated about 800,000 API calls over 30 hours while another key was used to make roughly 1.7 million calls over 13 hours. The combined usage came to a staggering $100,000 at list prices.
Such incidents are not just restricted to NVIDIA, with major US banks including JP Morgan, Morgan Stanley and Bank of America restricting Agents from accessing customer accounts earlier this month. Their primary concern is that automated assistants could veer off set instructions and initiate unauthorized approvals. Similarly, the CyberCartel hacking group has previously used Anthropic’s AI tool Claude and Grok’s XAI to conduct attacks on more than 400 Latin American institutions, mostly targeting banks and mobile payments services after attackers obtained customer login credentials. China-linked attackers have also been accused of using AI agents in a ConnectWise supply chain attack that left about 2,250 Microsoft 365 tenants exposed, with some attacks reportedly reaching privileged access in under three hours.
AI agents inadvertently leak 13,000+ internal screenshots from organizations
Key considerations
- Investor positioning can change fast
- Volatility remains possible near catalysts
- Macro rates and liquidity can dominate flows
Reference reading
- https://www.tomshardware.com/tech-industry/cyber-security/SPONSORED_LINK_URL
- https://www.tomshardware.com/tech-industry/cyber-security/nvidia-brev-security-breach-may-have-exposed-ssh-keys-used-to-access-customer-vms-investigation-finds-unauthorized-activity-spanning-16-days-but-no-evidence-of-misuse#main
- https://www.tomshardware.com/membership
- Hackers claim to have stolen 23TB of data from Russian statistics body, including Ukraine war casualty figures
- This week in Tom's Hardware Premium: October 31, 2026
- Thin, Light and Built for Everything: NVIDIA RTX Spark Windows Laptops Gain New Models, Agent Tools and Games
- 'America hates data centers' — New data highlights public sentiment
- This week in Tom's Hardware Premium: October 31, 2026
Informational only. No financial advice. Do your own research.