Featured
The Next AI Attack May Happen Inside the Data Center
AI is moving faster than the infrastructure beneath it. As neoclouds and data centers race to support increasingly powerful AI workloads and autonomous agents, the security models protecting that infrastructure are struggling to keep up with the pace of change.
Stay in the loop
Be the first to know about product updates, security research, and new blog posts from Lava.
An Open Letter to Neoclouds: Security Has to Catch Up
Neocloud security failures are exposing tenant boundaries, management infrastructure, and shared systems that should never be reachable.
Neocloud Security: You're Trusting Your Provider More Than You Should
Renting GPUs from a neocloud means trusting far more than the compute itself. Lava’s research has highlighted risks in that infrastructure. Separately, SemiAnalysis’s ClusterMAX 3.0 testing shows why customers should look beyond GPU availability when evaluating neocloud security.
Rethinking the Shared Responsibility Model for NeoCloud Security
AI infrastructure adds security-relevant layers below the customer’s direct control. Modern shared responsibility models need to show not only who operates those layers, but how they can affect the customer and what assurance the provider provides.
How We Hacked Thousands of Data Centers in Minutes Using a 20-Year-Old Vulnerability
A 20-year-old vulnerability gave us access to bare-metal servers - and a foothold in the no man’s land of data center infrastructure.
Securing the Metal Beneath the Model: Two Big Shifts Exposing AI Data Center
While the security industry fixates on model risks, AI data centers are creating a dangerous blind spot. Rapid, bare-metal deployments have left hardware security lagging. We are introducing FORGE, a community-driven framework designed to secure the "metal beneath the model" and fix critical infrastructure gaps.
Breaking the Trust: Introducing Firmware Integrity
Firmware runs before the operating system and controls the hardware beneath it. Maintaining its integrity is essential to ensuring that modern infrastructure starts, and remains, in a trusted state.
Breaking the Trust: Firmware Compromise in Modern Infrastructure
A look at real-world firmware attacks targeting UEFI, BMCs, and GPUs to gain stealthy, persistent access below the operating system.
Breaking the Trust: Enforcing Firmware Integrity
Firmware inventory can reveal what version a device reports, but it cannot prove that the firmware currently running is genuine. This blog explains how hardware-backed attestation, SPDM, ERoTs, and CoRIMs enable organizations to move from self-reported visibility to cryptographically verified firmware trust.
The Runtime Gap: Introducing Runtime Integrity
When machines move between tenants, AI infrastructure teams face a real trade-off: reboot for safety and lose valuable GPU time, or rely on partial cleanup and risk a compromise lurking beneath the surface.
The Runtime Gap: Runtime Attacks in Modern Infrastructure
From kernel rootkits to eBPF backdoors, attackers are targeting the deepest layers of your infrastructure to gain persistent, undetectable access. Once they control the runtime, every monitoring tool you trust can be lying to you.
The Runtime Gap: Enforcing Runtime Integrity
Attackers operate after boot, manipulating kernels, injecting libraries, and hiding in plain sight. Traditional trust models can't keep up. It's time to shift from static trust to continuous runtime verification.
Want to Talk?
We'd love to hear what brought you here.
Whether you're tackling these challenges or simply exploring, let's talk.