Where was Nvidia’s security team?
- ID
- 46571
- Status
- summarized
- Published
- 15 Nov 2026, 8:08 AM
- Fetched
- 15 Nov 2026, 8:24 AM
- Provider
- TechCrunch
- Category
- technology
- Original URL
- https://techcrunch.com/2026/11/14/where-was-nvidias-security-team/
- Source URL
- https://techcrunch.com/feed/
Summary
- Score
- 3.0
- Created
- 15 Nov 2026, 8:24 AM
- Tags
- Audience
- saas_foundersdevelopers
What happened
TechCrunch reports that Nvidia's longtime chief security officer David Reber — four years as CSO, seven at the company — stepped down in August citing a young-onset Parkinson's diagnosis, and was replaced by Saša Zdjelar, who came from 17 years at ExxonMobil plus stints at Salesforce and ReversingLabs. Two and a half months later, per the article, CEO Jensen Huang left the company amid questions about extramarital relationships, beginning with an executive at Megaspeed, a Singapore data center company that U.S. investigators suspect of funneling Nvidia chips to China (Megaspeed denies wrongdoing). The piece notes nothing public links the security-leadership change to the Megaspeed matter, but asks what the security team knew; retired senior intelligence officer Nicholas Eftimiades is quoted saying intelligence services collect much through everyday conversation rather than hacking, making this exposure hard to spot.
Why it matters
Concrete decision for founders and team leads: your insider-risk surface includes personal relationships with counterparties at companies under investigation, not just code and credentials — and the article's own framing shows the gap is ownership, since it notes relationships with subordinates typically fall to HR, legal and the board while a relationship with an executive at a federally investigated vendor fits nowhere. If your startup sells or resells GPUs or cloud capacity in Southeast Asia, the Megaspeed detail (a Singapore data center company under U.S. scrutiny over chip flows to China) is the part that touches you: know who your upstream counterparties are before an investigator asks. Everything else here is governance gossip with no artifact you can act on.
Discussion angle
In a 10-person startup there is no CSO — so who is supposed to flag a counterparty relationship as a risk, and would that person realistically ever hear about it? Worth asking whether 'insider risk' programs make sense below a certain headcount, or whether the honest answer is just knowing your vendors.