NVIDIA has told some users of its Brev cloud development platform that unauthorized activity between October 4 and October 20, 2026, may have exposed SSH keys provisioned for their virtual machines.
In a customer notification reported by Tom’s Hardware, the company said it rotated the affected keys and updated customer instances with replacements. NVIDIA said it was unaware of improper use of the keys.
SSH keys authenticate connections to remote systems. If a private key is obtained, it may allow access to the associated virtual machine, depending on its permissions and the machine’s other security controls. NVIDIA has not publicly explained how attackers accessed Brev or said whether customer workloads or data were accessed.
Wiz’s review of October incidents at AI developer platforms now also lists Brev among the reported cases. The disclosure follows a separate incident at Northflank, where customers were told that stored environment variables may have been compromised; Northflank’s breach response also involved customer credentials.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
