Hackers have struck NVIDIA again, this time targeting its BREV cloud development platform, with users reporting unauthorized activity between October 4 and October 20. According to a notification sent to affected customers, some accounts may have been exposed. The company said it had investigated the incident and identified unidentified activity on the platform, adding that information stored on the platform may have been exposed to malicious actors. The said information included the SHH key set up by Brev.

The company has already replaced the affected SHH keys and updated customer machines with new ones but says they found no evidence of improper use. “We are writing to inform you that NVIDIA Corporation has experienced a security incident that may have affected the security of your data," the notification reads. “Our analysis determined that your information from our Brev network may have been affected. This SSH key has since been rotated, and your instances have been updated with the replacement key.”

However, the company fell short of explaining how the attackers gained access, or whether anyone attempted to use the compromised data. Moreover, it has not disclosed whether customer data or workloads were accessed. SSH is a protocol used to establish a secure connection between ‘virtual machines’ or remote computers working together. Developers or system administrators can use it to manage remote servers, transfer files, and execute commands without needing physical access to the machine—much like AnyDesk or TeamViewer, but now for developers. Brev uses SSH keys to help customers access these services in the cloud, meaning if attackers access these keys, they could potentially take control of a virtual machine, depending on its specific permissions and other security controls.

Source link