Nvidia Security Team Under Scrutiny After CSO Exit and Jensen Huang Scandal

Executive Overview

In August 2025, David Reber, Chief Security Officer (CSO) and Head of Product Security at Nvidia, resigned after seven years at the company, citing health reasons. Just two and a half months later, a scandal erupted over Jensen Huang's extramarital relationships, beginning with an executive at Megaspeed—a Singapore-based data center company under U.S. federal investigation—followed by two additional relationships with Nvidia employees. A TechCrunch investigation raises a fundamental question: what did the security team know, and did anyone raise concerns?

Deep-Dive Features & Architecture

David Reber served as Nvidia's CSO for four years and spent seven years total at the company before resigning in August 2025. Reber announced on LinkedIn that he has had early-stage Parkinson's disease for more than two years and that his decision was due to health and family reasons. He was succeeded by Saša Zdjelar, who spent 17 years at ExxonMobil as a senior IT manager, then a year at Salesforce, and several years at ReversingLabs. Zdjelar did not respond to TechCrunch's questions about the transition or what the security team knew.

In the same context, a New York Times investigation revealed that Nvidia's top legal counsel had been in contact with the government investigation into Megaspeed more than a year earlier, meaning legal management was aware of federal scrutiny. The NYT also cited five Nvidia employees saying Huang had a relationship with a vice president who reported directly to him, and Reuters reported a second relationship. The open question: did any of this information reach the security team?

Retired intelligence expert Nicholas Efthimiadis, who has trained more than 1,000 corporate security professionals, notes that intelligence gathering often relies on everyday conversations rather than cyber intrusions, making risk detection difficult. He adds that security teams are often underfunded because they do not generate revenue, and that CEOs frequently respond to their warnings with "not one cent above compliance."

Benchmark & Competitive Performance

The material does not provide comparative numbers between products or models, but it offers a qualitative comparison between corporate security models: the traditional narrow model (facility protection + cyber attack prevention + physical threat response) versus the expanded model advocated by Don Aviv and Jeremy Horowitz in a The Hill article, which includes insider threats, recruitment of executives by foreign intelligence agencies, suspicious business relationships, and conflicts of interest. The material suggests that Nvidia, given its size and partners, likely has a broader security mandate than most companies, though this is not confirmed.

On the technical threat front, Efthimiadis notes that IMSI catchers—devices that mimic cell towers to intercept nearby phones—cost about $1,000 for the basic version and fit in a suitcase, while government models cost multiples more. He points to two Chinese espionage cases last year in which such devices were used. He adds that executives' phones are typically hardened to allow detection, if not prevention, of intrusions.

Industry Impact & Enterprise Adoption

The investigation underscores a growing challenge for enterprise security teams: the definition of "security" is expanding beyond traditional cyber and physical perimeters to include insider threats, executive conduct, and geopolitical intelligence risks. For Nvidia—a company at the center of the AI chip supply chain and U.S.-China tech tensions—the stakes are particularly high. The lack of public linkage between Reber's departure and the Huang scandal does not resolve questions about whether internal risk management failed to escalate concerns. The case may prompt other enterprises to reassess the scope of their security mandates and funding, especially as generative AI and data center operations increase exposure to espionage and insider risks.

Conclusion

While no confirmed link exists between David Reber's resignation and the Jensen Huang scandal, the TechCrunch investigation highlights a critical gap in how Nvidia and similar enterprises define and resource internal security. The departure of a CSO for health reasons is not inherently suspicious, but the timing and the subsequent revelations about executive conduct and federal investigations raise legitimate questions about risk awareness and escalation. As AI companies grow in strategic importance, the security function must evolve from a compliance cost center to a core component of enterprise risk management—one that includes insider threat intelligence, executive protection, and proactive counterintelligence.

Media Source: TechCrunch AI | Fact Verification & Analysis: AI Tools Oasis