Nvidia's Vera Rubin NVL72, introduced at CES 2026, encrypts each bus throughout 72 GPUs, 36 CPUs, and your complete NVLink material. It's the primary rack-scale platform to ship confidential computing throughout CPU, GPU, and NVLink domains.
For safety leaders, this basically shifts the dialog. Somewhat than trying to safe advanced hybrid cloud configurations by means of contractual belief with cloud suppliers, they’ll confirm them cryptographically. That’s a essential distinction that issues when nation-state adversaries have confirmed they’re able to launching focused cyberattacks at machine pace.
The brutal economics of unprotected AI
Epoch AI analysis reveals frontier coaching prices have grown at 2.4x yearly since 2016, which implies billion-dollar coaching runs may very well be a actuality inside a couple of quick years. But the infrastructure defending these investments stays basically insecure in most deployments. Safety budgets created to guard frontier coaching fashions aren't maintaining with the exceptionally quick tempo of mannequin coaching. The result’s that extra fashions are below menace as present approaches can't scale and sustain with adversaries' tradecraft.
IBM's 2025 Price of Knowledge Breach Report discovered that 13% of organizations skilled breaches of AI fashions or functions. Amongst these breached, 97% lacked correct AI entry controls.
Shadow AI incidents value $4.63 million on common, or $670,000 greater than customary breaches, with one in 5 breaches now involving unsanctioned instruments that disproportionately expose buyer PII (65%) and mental property (40%).
Take into consideration what this implies for organizations spending $50 million or $500 million on a coaching run. Their mannequin weights sit in multi-tenant environments the place cloud suppliers can examine the info. {Hardware}-level encryption that proves the atmosphere hasn't been tampered with adjustments that monetary equation completely.
The GTG-1002 wake-up name
In November 2025, Anthropic disclosed one thing unprecedented: A Chinese language state-sponsored group designated GTG-1002 had manipulated Claude Code to conduct what the corporate described as the primary documented case of a large-scale cyberattack executed with out substantial human intervention.
State-sponsored adversaries turned it into an autonomous intrusion agent that found vulnerabilities, crafted exploits, harvested credentials, moved laterally by means of networks, and categorized stolen information by intelligence worth. Human operators stepped in solely at essential junctures. Based on Anthropic's evaluation, the AI executed round 80 to 90% of all tactical work independently.
The implications prolong past this single incident. Assault surfaces that when required groups of skilled attackers can now be probed at machine pace by opponents with entry to basis fashions.
Evaluating the efficiency of Blackwell vs. Rubin
Specification
Blackwell GB300 NVL72
Rubin NVL72
Inference compute (FP4)
1.44 exaFLOPS
3.6 exaFLOPS
NVFP4 per GPU (inference)
20 PFLOPS
50 PFLOPS
Per-GPU NVLink bandwidth
1.8 TB/s
3.6 TB/s
Rack NVLink bandwidth
130 TB/s
260 TB/s
HBM bandwidth per GPU
~8 TB/s
~22 TB/s
Business momentum and AMD's various
Nvidia isn't working in isolation. Analysis from the Confidential Computing Consortium and IDC, launched in December, discovered that 75% of organizations are adopting confidential computing, with 18% already in manufacturing and 57% piloting deployments.
"Confidential Computing has grown from a niche concept into a vital strategy for data security and trusted AI innovation," stated Nelly Porter, governing board chair of the Confidential Computing Consortium. Actual limitations stay: attestation validation challenges have an effect on 84% of respondents, and a expertise hole hampers 75%.
AMD's Helios rack takes a unique method. Constructed on Meta's Open Rack Broad specification, introduced at OCP World Summit in October 2025, it delivers roughly 2.9 exaflops of FP4 compute with 31 TB of HBM4 reminiscence and 1.4 PB/s combination bandwidth. The place Nvidia designs confidential computing into each element, AMD prioritizes open requirements by means of the Extremely Accelerator Hyperlink and Extremely Ethernet consortia.
The competitors between Nvidia and AMD is giving safety leaders extra of a alternative than they in any other case would have had. Evaluating the tradeoffs of Nvidia's built-in method versus AMD's open-standards flexibility for his or her particular infrastructures and business-specific menace fashions is essential.
What safety leaders are doing now
{Hardware}-level confidentiality doesn't change zero-trust ideas; it offers them enamel. What Nvidia and AMD are constructing lets safety leaders confirm belief cryptographically somewhat than assume it contractually.
That's a significant shift for anybody working delicate workloads on shared infrastructure. And if the attestation claims maintain up in manufacturing, this method may let enterprises prolong zero-trust enforcement throughout hundreds of nodes with out the coverage sprawl and agent overhead that software-only implementations require.
Earlier than deployment: Confirm attestation to substantiate environments haven't been tampered with. Cryptographic proof of compliance ought to be a prerequisite for signing contracts, not an afterthought or worse, a nice-to-have. In case your cloud supplier can't show attestation capabilities, that's a query value elevating in your subsequent QBR.
Throughout operation: Preserve separate enclaves for coaching and inference, and embrace safety groups within the mannequin pipeline from the very begin. IBM's analysis confirmed 63% of breached organizations had no AI governance coverage. You’ll be able to't bolt safety on after improvement; that interprets into an onramp for mediocre safety design-ins and prolonged crimson teaming that catches bugs that wanted to be engineered out of a mannequin or app early.
Throughout the group: Run joint workout routines between safety and information science groups to floor vulnerabilities earlier than attackers discover them. Shadow AI accounted for 20% of breaches and uncovered buyer PII and IP at increased charges than different breach sorts.
Backside line
The GTG-1002 marketing campaign demonstrated that adversaries can now automate large-scale intrusions with minimal human oversight at scale. Almost each group that skilled an AI-related breach lacked correct entry controls.
Nvidia's Vera Rubin NVL72 transforms racks from potential liabilities into cryptographically attested belongings by encrypting each bus. AMD's Helios provides an open-standards various. {Hardware} confidentiality alone received't cease a decided adversary, however mixed with sturdy governance and lifelike menace workout routines, rack-scale encryption offers safety leaders the inspiration they should defend investments measured in lots of of thousands and thousands of {dollars}.
The query dealing with CISOs isn't whether or not attested infrastructure is value it. It's whether or not organizations constructing high-value AI fashions can afford to function with out it.
