Noma Security

Every team shipping AI features hits the same wall. Developers want to connect to whatever model or agent framework gets the job done. Security teams need to know that every prompt, every response, and every action an agent takes is being checked for data leaks, prompt injection, and unsafe behavior. The usual answer is to […] The post Noma Security Is Now a Native Guardrail Across the TrueFoundry Stack appeared first on Noma Security .

Quarterly Report filed 2026-08-13

Material Event filed 2026-08-12

When AI agents spread across international market research company Kantar faster than any manual process could keep up, Noma gave them a systematic way to discover, test, and govern agents allowing teams to ship AI worthy of customer trust.     Industry: Marketing data and analytics Region: Global Use Cases: Safe AI adoption, AI red […] The post Kantar Secures the Explosion of AI Agents With Noma (AWS) appeared first on Noma Security .

TL;DR Noma Labs found a critical (10 CVSS) vulnerability in Ruflo, an open source AI agent orchestration platform with more than 67,000 GitHub stars at the time of this writing and ranked #2 on MCPMarket. Ruflo ships with a chat UI, agent swarms, persistent memory, and MCP-based tool calling. The platform’s MCP Bridge, the Express.js […] The post RufRoot: The MCP Bridge Vulnerability That Turns Agents Into Rogue Admins (CVE-2026-59726) appeared first on Noma Security .

On July 27, 2026, Microsoft introduced a set of products that move its security portfolio from models that answer questions to agents that carry out multi-step work on their own. For security leaders, the announcement is worth understanding in some detail, because it signals how the largest platform vendors now expect defensive operations to run, […] The post What Microsoft MDASH and Project Perception Mean for Defenders appeared first on Noma Security .

Black Hat USA 2026 runs August 1-6 in Las Vegas, with an AI Summit on August 4 focused on how AI is reshaping both digital defense and the threat landscape. CISOs and defenders will hear a lot about AI while we’re there. Some of it will be useful. Some of it will be breathless. Some […] The post Black Hat Will Be Loud About AI: Here Are 5 Signals Worth Listening For appeared first on Noma Security .

Last week’s Hugging Face incident is the kind of event that should make every professional using AI tools stop and pause. As we said in our write up on the event, Hugging Face, one of the world’s largest hosts of open-source AI models and datasets, was subject to a breach of previously unseen severity when […] The post What the NVIDIA Open Secure AI Alliance Means for Organizations appeared first on Noma Security .

What began as an internal benchmark evaluation has quickly become another watershed moment in cybersecurity history. An autonomous AI agentic framework initiated a full-scale attack against Hugging Face, executing a multi-stage intrusion end-to-end at machine speed and all without human direction or manual oversight. Beyond displaying the raw power of next-generation models, this incident revealed […] The post The Great (Sandbox) Escape – Analyzing the OpenAI and Hugging Face Security Incident appeared first on Noma Security .

Today, Noma is launching an integration with Claude’s Compliance API, extending our coverage of Claude Enterprise usage, including chats, files, and activity, into the same governance workflows that already cover other agent types like endpoint AI agents, SaaS agents, Homegrown AI, and AI components like MCP servers, skills, and tools. While Claude is widely used […] The post One Control Plane for Enterprise AI: Noma Integrates with Claude’s Compliance API appeared first on Noma Security .

Unfortunately, even after years of championing a “build security in” mindset, many security professionals will tell you that it can still feel like security gets bolted on once a system is already live. We know the cost of addressing issues late in the cycle, which is why so many teams embraced DevSecOps and began weaving […] The post That’s a Great Question – AI Behaves Differently, How Should My Security Approach Change? appeared first on Noma Security .