Skip to main content

Latest articles

What NVFLARE Is: Federated Learning Infrastructure and the Distinct Attack Surface It Creates

NVIDIA Federated Learning Application Runtime Environment (NVFLARE) is the software that enables multiple institutions to collaboratively train AI models without sharing raw data.

NVIDIA Federated Learning Application Runtime Environment (NVFLARE) is the software that enables multiple institutions to collaboratively train AI models without sharing raw data. Each institution trains locally and shares only model updates with a central coordinator. NVFLARE is used in healthcare (multi-hospital AI model training without sharing patient records), finance (collaborative fraud detection models), and research (multi-institutional scientific AI). The federated learning architecture creates a distinct attack surface — one where network participants have legitimate access to a shared training infrastructure, where the trust boundary between participants and the coordinator must be software-enforced, and where the consequences of a security failure extend to every institution in the federation.

Older articles

What the NVIDIA AI Stack Is: Container Toolkit, GPU Operator, Triton, and How They Fit Together

Jun 28, 20263 MIN

What Full-Stack GPU Telemetry Means: From CUDA Kernel to Network Egress

Jun 28, 20264 MIN

What Kernel Hash Verification Means: Detecting Unauthorised GPU Code

Jun 28, 20264 MIN

What a CUDA Context Is: And Why Tracking It Per Container Matters for Security

Jun 28, 20264 MIN

What GPU Telemetry Exists Today: Utilisation, Memory, and Why None of It Is a Security Signal

Jun 28, 20264 MIN

Why Traditional Runtime Security Tools Don't Cover GPUs: What eBPF Sees and What It Misses

Jun 28, 20264 MIN

How Kubernetes Namespace Isolation Fails for GPU Workloads: Why RBAC Is Not Enough

Jun 28, 20264 MIN

vGPU vs MIG vs Time-Slicing: The Three GPU Sharing Models and Their Security Tradeoffs

Jun 28, 20264 MIN

What MIG Is: Hardware Partitioning Explained, and What It Does and Does Not Guarantee

Jun 28, 20263 MIN

What the GPU Device Plugin Does: Architecture and Where the Security Model Breaks Down

Jun 28, 20263 MIN

How Kubernetes GPU Scheduling Works: Device Plugins, Resource Requests, and Where It Breaks

Jun 28, 20263 MIN

What the GPU Operator Is: Kubernetes-Native GPU Management and Its Attack Surface

Jun 28, 20263 MIN

What OCI Hooks Are: And Why They Became a Recurring GPU Vulnerability Class

Jun 28, 20263 MIN

How GPU Containers Differ from CPU Containers: The Five Layers and What Traditional Tools Miss

Jun 28, 20263 MIN

What the NVIDIA Container Toolkit Is: The Component in 100% of GPU Containers

Jun 28, 20263 MIN

What a Container Is at the Kernel Level: Namespaces, Cgroups, and Why GPU Containers Break the Model

Jun 28, 20263 MIN

What GPU Drivers Actually Do: Why They Are Large, Privileged, and Hard to Audit

Jun 28, 20263 MIN

How the CUDA Execution Model Works: Kernels, Contexts, and What Runs Where

Jun 28, 20263 MIN

What CUDA Is: The Programming Model Running Every AI Workload and Its Security Surface

Jun 28, 20263 MIN

How GPU Memory Works: VRAM, Shared Memory, and Where Isolation Assumptions Break

Jun 28, 20263 MIN

What Is a GPU -- and Why It Is Architecturally Different from a CPU

Jun 28, 20264 MIN

k8s-device-plugin Image Supply Chain: The Rolling Base OS CVE Problem in NVIDIA's Own Kubernetes Plugin

Jun 28, 20264 MIN

SBOM Gaps and Supply Chain Privilege Escalation: Invisible Components, Invisible Risk

Jun 28, 20264 MIN

NVLink as a Lateral Movement Vector: GPU Interconnect in Data Centre Attack Scenarios

Jun 28, 20263 MIN

Kubernetes GPU Node to Cluster Takeover: The Full Attack Chain

Jun 28, 20263 MIN

GPU Driver Privilege Escalation: From User Mode to Kernel via a Single CVE

Jun 28, 20263 MIN

Cross-Tenant Data Leakage in AI Cloud: What Happens When Accelerator Memory Is Not Properly Cleared

Jun 28, 20262 MIN

Multi-Tenant GPU Risk in Neocloud and Hyperscaler Environments: Where Known CVEs Land Hardest

Jun 28, 20262 MIN

vGPU Escape Attacks: Breaking Isolation in Virtualised GPU Environments

Jun 28, 20262 MIN

MIG Isolation Violations: What Cross-Partition Access Looks Like and Why Nothing Detects It Today

Jun 28, 20263 MIN

Bandwidth Utilisation Side-Channel: Inferring Model Architecture from Memory Bus Patterns on AI Accelerators

Jun 28, 20262 MIN

Whispering Pixels and Register Leakage: What AMD's Vulnerability Class Reveals About GPU Memory Assumptions Industry-Wide

Jun 28, 20262 MIN

Prime+Probe on GPU L2 Cache: Cross-Workload Fingerprinting and Data Recovery

Jun 28, 20262 MIN

GPU Side-Channel Attacks: Timing, Power, and Cache-Based Information Leakage Across the Accelerator Stack

Jun 28, 20262 MIN

GPU Memory Snooping: Residual Data in VRAM Between Workloads in Shared Environments

Jun 28, 20262 MIN

Model Inversion Attacks: Reconstructing Sensitive Inputs from GPU-Side Model Outputs

Jun 28, 20262 MIN

Gradient Leakage in Federated Learning: Extracting Training Data from Model Updates

Jun 28, 20262 MIN

Training Data Poisoning via the GPU Pipeline: Injecting Manipulation at the Hardware Layer

Jun 28, 20262 MIN

AI Model Theft via Inference Attacks: Reconstructing Models Without Touching the Weights

Jun 28, 20262 MIN

Model Weight Exfiltration: Reading Proprietary Weights from GPU Memory Before Egress

Jun 28, 20263 MIN

GPU Compute Hijacking in Kubernetes: Stealing Capacity at Scale Without Triggering Detections

Jun 28, 20262 MIN

CUDA Kernel-Based Cryptomining: Hiding Inside Legitimate AI Workload Signatures

Jun 28, 20262 MIN

Cryptomining Inside AI Containers: Why GPU Utilisation Looks Normal and No Alert Fires

Jun 28, 20263 MIN

Container Runtime Process Injection: What Syscall Monitoring Misses Below the GPU Boundary

Jun 28, 20263 MIN

Malicious GPU Container Image Supply Chain: How Attackers Enter Via Compromised Base Images

Jun 28, 20263 MIN

GPU Driver Exploit to Node Compromise: From Container to Cluster Owner

Jun 28, 20263 MIN

LD_PRELOAD Hijacking in GPU Containers: The Technique Behind Two Critical NVIDIA CVEs

Jun 28, 20263 MIN

GPU Container Escape: How the OCI Hook Attack Pattern Produced Three Critical NVIDIA Disclosures

Jun 28, 20263 MIN

AMD Instinct Security Bulletins 2025-2026: Graphics Driver Vulnerabilities and MI300X Management Interface Exposure

Jun 24, 20262 MIN

CVE-2024-21969 (Whispering Pixels): Uninitialized GPU Register Access in AMD Hardware

Jun 24, 20263 MIN

CVE-2024-36342: Heap Overflow in AMD GPU Driver Across the Instinct Data Centre Accelerator Line

Jun 24, 20262 MIN

CVE-2026-24186 + CVE-2026-24178: FOBS Deserialization and Authentication Bypass in NVFLARE -- 2026

Jun 24, 20262 MIN

January & May 2026 GPU Display Driver Bulletins

Jun 24, 20262 MIN

CVE-2026-24187: Use-After-Free in the NVIDIA Linux Display Driver -- May 2026

Jun 24, 20262 MIN

CVE-2023-31035: SMM-Level Code Execution in the NVIDIA DGX A100 SBIOS

Jun 24, 20262 MIN

CVE-2022-34668: NVFLARE Pickle Deserialization and the Federated Learning Attack Surface

Jun 24, 20262 MIN

Mid-2024 NVIDIA GPU Display Driver Bulletins: Out-of-Bounds Writes and Reads Across the Driver Stack

Jun 24, 20262 MIN

CVE-2022-34669 + CVE-2022-34671: High-Severity Windows GPU Driver Vulnerabilities That Set the Template

Jun 24, 20262 MIN

January 2025 NVIDIA GPU Display Driver Bulletin: Buffer Overflows, vGPU Memory Corruption, and a Unified Memory Leak

Jun 24, 20262 MIN

CVE-2024-0132 + CVE-2024-0133: The Container Escape That Changed How the Industry Thinks About GPU Security

Jun 24, 20262 MIN

CVE-2024-0087 and the 2024 Triton Bulletins: The Year the Inference Server Became a Target

Jun 24, 20262 MIN

CVE-2025-33225 / CVE-2025-33235: Predictable Log Files and Race Conditions in NVIDIA’s Training Resilience Layer

Jun 24, 20262 MIN

NVIDIA Megatron-LM: Code Injection Across the LLM Training Stack

Jun 24, 20262 MIN

September 2025 CUDA Toolkit Bulletin: Heap Overflow and Stack Overflow Return to nvdisasm and cuobjdump

Jun 24, 20262 MIN

NVIDIA CUDA Toolkit: Nine Vulnerabilities in cuobjdump and nvdisasm — The Developer Tool Attack Surface

Jun 24, 20262 MIN

October 2025 NVIDIA GPU Display Driver Bulletin: Use-After-Free, Race Conditions, and DLL Hijacking Across the Driver Stack

Jun 24, 20262 MIN

April 2025 NVIDIA GPU Display Driver Bulletin: Privilege Escalation and vGPU Resource Exploitation

Jun 24, 20262 MIN

CVE-2025-23316 / CVE-2025-23268 / CVE-2025-23331: Command Injection and DoS in the September 2025 Triton Bulletin

Jun 24, 20262 MIN

CVE-2025-23310 / CVE-2025-23311 / CVE-2025-23317: Stack and Heap Overflows in Triton's HTTP Layer

Jun 24, 20262 MIN

CVE-2025-23319 / CVE-2025-23320 / CVE-2025-23334: The Three-Step Chain That Handed Attackers Your AI Models

Jun 24, 20262 MIN

The February 2025 Container Toolkit Bulletin: Why NVIDIA Held the Details for Five Months

Jun 24, 20262 MIN

CVE-2024-0135 / CVE-2024-0136 / CVE-2024-0137: How Unprivileged Containers Bypassed the Kubernetes GPU Scheduler

Jun 24, 20262 MIN

CVE-2025-23359: The Patch That Wasn't Complete

Jun 24, 20262 MIN

CVE-2025-23267: Symlink Attack in the NVIDIA Container Toolkit's ldcache Hook

Jun 24, 20262 MIN

CVE-2025-23266 (NVIDIAScape): A Three-Line Container Escape in the NVIDIA Container Toolkit

Jun 24, 20263 MIN