SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

NVIDIA Patches Critical Hard-Coded Credentials Flaw in AI Data Center Controller

0
·1 views

NVIDIA disclosed CVE-2026-65113, a hard-coded credentials vulnerability rated 9.8 out of 10 on the CVSS v3.1 scale, in its NVIDIA Infrastructure Controller (NICo) for Linux across all versions from 0 through 1.9. NICo is a Kubernetes-based control plane that automates bare-metal provisioning, firmware validation, DPU setup, OS deployment, network isolation and tenant sanitization for AI data centers. The disclosure is a 14-CVE batch that also includes five high-severity flaws, such as SQL injection and missing authentication. No in-the-wild exploitation was confirmed at disclosure, and NVIDIA's fix is NICo version 2.0. Security guidance advises isolating the management plane from untrusted networks and auditing any hard-coded or default credentials.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Building a Lock-Free, Zero-Allocation Audio Engine in Modern C++ Without JUCE

The author describes writing a pull-based audio engine and multi-format plugin host from scratch in C++20 for infinite, an open-source modular workstation, rather than using the widely adopted JUCE framework. At 48kHz with a 128-sample buffer, the audio callback has about 2.66 milliseconds to finish before underflow causes audible clicks. To meet hard real-time requirements, the design pre-allocates all memory during preparation, avoids mutexes in favor of atomics and lock-free ring buffers, and lays out audio data for SIMD-friendly, cache-efficient processing. The engine talks directly to VST3 and Audio Unit APIs, enabling real-time modulation of third-party plugin parameters from signals within the app. The project also includes FIELD, an embedded DSP language that compiles user-written filters into optimized per-sample vector loops without requiring C++ recompilation.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Beginner's Guide to Software Development Tools and Environments

Software engineers need more than coding skills, relying on tools and a working environment to write, test, organize, and manage projects. A development environment is the set of software and configurations used to build and test applications, much like an artist's materials. It typically includes a code editor or IDE such as VS Code, PyCharm, or IntelliJ IDEA, along with language runtimes, version control, and testing tools. Git tracks code changes, while GitHub hosts repositories and supports collaboration, and the terminal enables running commands and managing workflows. The article advises beginners to start with essentials and add tools like databases and testing frameworks as projects grow more complex.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Cron Jobs Near Midnight Can Report on the Wrong Day Due to Time Zones

Cron schedules run in UTC by default, so a job meant for local midnight can fire on the wrong calendar day for users in other regions. The author has seen this same root cause across four codebases, where reporting windows end up shifted by hours. Edge cases such as month boundaries and daylight saving transitions can move records into the wrong month or cause a one-hour drift. The recommended fix is to define the business timezone as an IANA name like Europe/Berlin rather than a fixed UTC offset, compute the reporting window in that zone, and convert to UTC only at query time.

0 comments Read more at DEV Community
NVIDIA Patches Critical Hard-Coded Credentials Flaw in AI Data Center Controller · ShortSingh