NVIDIA’s recent shake-up has cast a spotlight not just on leadership changes, but on what the company’s security apparatus knew—or didn’t—about the behaviors that brought those changes about.
In August 2026, NVIDIA’s then-chief security officer (CSO), David Reber, stepped down citing health issues. A few months later, CEO Jensen Huang resigned amid reports of multiple extramarital relationships, one involving an executive at Megaspeed—a Singapore data center firm under U.S. investigation for allegedly redirecting NVIDIA chips to China—and others with NVIDIA employees. Reber had attributed his departure to long-term health struggles—he’d been diagnosed with young-onset Parkinson’s over two years earlier.
Leadership shuffle and opaque signals
Replacing Reber was Saša Zdjelar, who brought experience from ExxonMobil, Salesforce, and the cybersecurity firm ReversingLabs. Yet, there’s been no public clarity on what Zdjelar or Reber understood about the controversies brewing around Megaspeed or Huang’s personal relationships. NVIDIA has not addressed whether any of this fell within the purview of its security division.
Some of the alleged relationships included one between Huang and a vice president who reported directly to him. Others involved employees, though none of it—at least publicly—has been confirmed to have triggered any security-level alarm. Internally, some peers were reportedly aware of these relationships, but whether that translated into risk assessments or acted-upon reports remains unclear.
Insider threats, intelligence risk, and security culture
Corporate security experts stress that high-ranking executives with personal ties—especially with those connected to companies under investigation—present higher risk for intelligence operations. In many cases, these risks are subtle and cultivated over time, via informal connections rather than overt breaches. That makes them harder to detect than a typical cyberattack.
NVIDIA’s general counsel reportedly engaged with the Megaspeed investigation over a year ago, showing legal channels were aware. Still, sources say that security teams are often under-resourced and constrained. They may receive warnings but are frequently told to stay within the boundaries of minimum compliance rather than fully proactive or preventive oversight.
Beyond detecting offboard relationships, experts say the broader scope of threats—including espionage, export controls, and conflicts of interest—requires security teams to collaborate closely with HR, legal, and corporate governance. Any lapse in communication between these departments can create gaps that foreign intelligence services are skilled at exploiting.
In this case, it’s not yet known how much the security team at NVIDIA could have acted on or even had visibility into the CEO’s conduct. The company’s board is conducting an independent investigation, and federal authorities are also involved. It remains to be seen what internal insights existed and when.
Ultimately, this situation could serve as a wake-up call: even the most sophisticated tech firms may stumble when internal dynamics, executive behavior, and security protocols collide. What’s at stake is more than reputation—it’s trust, policy influence, and potentially national security.
What To Watch: As NVIDIA’s board-led probe unfolds and regulatory scrutiny deepens, we’ll be looking for evidence of when internal reporting took place, how security warnings (if any) were handled, and whether gaps in policy allowed key behaviors to go unchecked.
