One Writable Memory Section Put Nvidia’s Windows User Boundary in Doubt
A public PoC says Nvidia’s Windows GPU components expose shared memory that any user can write. Nvidia is investigating the scope and remediation.
NVIDIA
The AI Sandbox Was the Attack Surface: NVIDIA Fixed 18 NemoClaw and OpenShell Flaws.
NVIDIA fixed 18 NemoClaw and OpenShell vulnerabilities, including two network-reachable 9.9 flaws that can escape the sandbox. OpenShell 0.0.34 and specific NemoClaw commits contain the fixes.
ECC Was the Mitigation. GPUThor Still Reached Root.
GPUThor defeats ECC on four NVIDIA Ampere workstation GPUs, causes resets and escalates an unprivileged CUDA program to host root. NVIDIA now recommends ECC plus verified IOMMU isolation.
Apple Moved Private Cloud Compute Onto Google’s Hardware. The Trust Model Had to Move With It.
Apple extended Private Cloud Compute onto Google Cloud and NVIDIA hardware, turning attestation, independent roots of trust and public verification into the privacy boundary.