BLOG

Root on Every GPU Container Start: Catching NVIDIA Container Toolkit Compromise

The NVIDIA Container Toolkit is mandatory, privileged, and almost entirely unmonitored — and most detection content written for it watches binaries that no longer execute. One docker run --gpus all produced six root executions of nvidia-cdi-hook on our test host, before the workload's first instruction. Here is what actually runs on a modern GPU node, and how Stealthium separates legitimate hook execution from abuse.

AUG 2026Stealthium Security Research Team

SECURITYAIGPU

ShadowRay 2.0: Turning Exposed Ray Clusters Into a GPU-Mining Botnet — and How Stealthium Catches It

An internet-exposed Ray dashboard is an open door: an unauthenticated job submission runs attacker code on every node, and within minutes a crypto-miner is pinning your GPUs while your model weights walk out — all while monitoring reports a training job as running. We reproduced the ShadowRay 2.0 kill chain end to end against a real Ray cluster on an NVIDIA L40S and watched Stealthium catch every stage, from the unauthenticated request to the CUDA proof-of-work kernel.

AUG 2026Stealthium Security Research Team

SECURITYNVIDIA

Investigating Behind Bars: Model Fingerprinting By Nosy Neighbors.

Behind Bars (USENIX Security '26) found a side channel that survives NVIDIA MIG's L2 partitioning: GPU-wide memory barriers cross every partition on the card. We reproduced it independently on current H100 hardware, identified which of five LLMs a neighbor was serving from 0.558 seconds of trace at 97.0% accuracy, and caught the probe live with Stealthium.

AUG 2026Stealthium Security Research Team

PARTNERSHIPSSECURITYAI

Across The AI Accelerator-verse: A Need for Security and Observability

As the demand and potential of AI scales exponentially, the infrastructure landscape is both fragmenting and flourishing. New neo-cloud providers and silicon providers are reestablishing a multi-cloud, multi-accelerator wave. This evolution of compute has not had a matching evolution of security.

JUL 2026Stealthium Security Research Team

PRESS RELEASEPARTNERSHIPS

Stealthium and Tenstorrent Partner to Deliver Runtime Observability for AI Infrastructure

Stealthium's runtime observability platform integrates with Tenstorrent's open AI compute platform to provide visibility into AI workloads running on Tenstorrent systems.

JUL 2026Stealthium Security Research Team

SECURITYKVM

Stopping A Two-Faced Greedy Guest: How Stealthium Protects Against Januscape.

Januscape (CVE-2026-53359) is a shadow-MMU bug in KVM that lets a malicious guest fully escape to the host — on both Intel and AMD from the same trigger. It is invisible to every tool that watches only guests and host userspace. Here is how the attack unfolds, and how Stealthium stops its exploitation before impact.

JUL 2026Stealthium Security Research Team

SECURITYNVIDIA

Your GPU Can Be Rooted From Inside a CUDA Kernel. Here Is Exactly How.

An unprivileged process inside a CUDA container can gain arbitrary read/write to every byte of VRAM on a shared GPU — model theft, model poisoning, private inference data exposure. No special permissions, no kernel exploits, invisible to endpoint security. This is GPUBreach: Lateral Movement, Collection, and Impact.

APR 2026Stealthium Security Research Team

SECURITYNVIDIA

GPUBreach: A Root Shell Through GPU Abuse — and How Stealthium detects it.

Before the full GPUBreach paper was published, the Stealthium security team traced the vulnerable path in NVIDIA's open-source kernel modules, confirmed the overflow dimensions with an instrumented kernel build, and had detection in place. This post documents that analysis.

APR 2026Stealthium Security Research Team

SECURITYAI

The Trillion-Dollar Blind Spot: Inside the Black Box of AI Factories

The US government has committed $500 billion to AI infrastructure. Enterprises are dropping eight figures on H100 clusters. And not one of them has a tool that tells them what is actually executing inside those accelerators at runtime.

MAR 2026Stealthium Security Research Team

SECURITYNVIDIA

Inside CUDA Fatbins - The Hidden World of GPU Binary Formats - Part 1

When compiling a CUDA program, nvcc creates something more complex than a simple executable. This post explores the internals of CUDA's fatbin format — the multi-architecture binary container that makes 'compile once, run anywhere' possible, and the security implications hiding in plain sight.

MAR 2026Stealthium Security Research Team

ENGINEERINGGPU

How Stealthium Built a Faster GPU Monitoring Layer

NVML is the industry standard for GPU monitoring, but at production scale its per-call overhead compounds fast. Stealthium GPU Monitor is our answer: a monitoring layer we built and own, designed for deep observability with faster startup, lower memory footprint, and richer data than NVML in most cases.

MAR 2026Stealthium Security Research Team

SECURITYAI

The GPU Security Gap Nobody Owns

Enterprises are deploying AI workloads with zero GPU-level security visibility, caught in a dangerous shared responsibility blind spot. Cloud providers secure the infrastructure—but what runs inside your GPU allocation has always been your responsibility.

FEB 2026Stealthium Security Research Team

PARTNERSHIPSSECURITYAI

Substrate AI and Stealthium Partner to Deliver Runtime Security for AI Infrastructure

As artificial intelligence infrastructure scales across enterprises and public sector organizations, security, transparency, and compliance have become critical operating requirements. Modern AI environments are highly distributed, GPU-accelerated, and often shared across multiple tenants, yet visibility and runtime protection at the GPU layer remain limited.

JAN 2026Stealthium Security Research Team

SECURITYNVIDIA

NVIDIA Driver Vulnerabilities: Deep Dive and Runtime Detection Strategies

The AI revolution is happening whether you're on board or not, and that means something you're doing requires GPUs, probably something business critical. And when NVIDIA's kernel modules leaked two privilege-escalation vulnerabilities this fall, most organizations learned about GPU attack surfaces the hard way—through CVE notices rather than telemetry.

NOV 2025Stealthium Security Research Team