Nvidia has notified customers of Brev, its cloud development platform, about a security incident. According to Tom's Hardware, the investigation found unauthorized activity on the platform between October 4 and October 20, and information stored there, including the SSH key Brev set up for customer machines, may have been exposed to the attackers.
"This SSH key has since been rotated, and your instances have been updated with the replacement key," the notice says. Nvidia says it found no evidence the keys were misused. The company did not explain how the attackers got in or say whether anyone tried to use the data.
What to do: Brev customers who received the notice should make sure they are using the new key and check for unusual access to their machines between October 4 and October 20.