We discovered a high-severity vulnerability in NVIDIA’s GPU monitoring software that lets attackers remotely crash monitoring and exhaust server resources without authentication.
We found 2,100+ exposed servers monitoring 12,000+ GPUs.
Full research: https://t.co/iaMUkWqJp8
AI’s attack surface goes much deeper than the models.
One exposed server controller can put an entire GPU fleet at risk. We need to protect neoclouds from the hardware up.
@lavaiodc mapped thousands of exposed controllers. A wake-up call for anyone building AI infrastructure.
What else is vulnerable?
More here: https://t.co/9WzO4XA2Lw
Neoclouds have limited cybersecurity. Next time agents successfully go rouge, they'll try taking over a neocloud to run more copies. This is bad.
Thus: neoclouds should greatly strengthen their cybersecurity and every company with strong cyber models should help with that.
@ilyasut We’ve been researching this closely at @lavaiodc , and the risk is significant. We published FORGE, a practical framework covering AI data center security risks and best practices: https://t.co/uFWqreV4zb
🚨 Attackers are targeting the datacenters that train, host, and serve AI, not just the AI models themselves.
Lava has released FORGE: The Top 10 Data Center & AI Infrastructure Security Risks: https://t.co/pR1L2alg8K
Built with security leaders and practitioners across neoclouds, HPC, and enterprise security — open, free, and made to evolve.
Today, we’re releasing FORGE, an actionable security framework for data centers and AI infrastructure.
Built with CISOs, neocloud experts, researchers, and infrastructure leaders to help teams understand and reduce risk across the stack.
https://t.co/uFWqreV4zb