Noma Blog

RufRoot: The MCP Bridge Vulnerability That Turns Agents Into Rogue Admins (CVE-2026-59726)

The goal: Make every agent known, owned, least privileged, context-aware, and auditable; then enforce at runtime.

Gal Moyal

Eli Ainhorn

July 29, 2026

Trust framework logos
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
||
Education

Why the Rule of Two Can't Protect Your Agents: MCP Servers, Agentic Risk, and the Framework That Should Replace It

Gal Moyal

Gal Moyal

March 17, 2026

|||
Education

Noma x OWASP: The Ultimate Red Team Playbook

Gal Moyal

Ariel Elazary

March 6, 2026

|||||
Noma Labs
Research
Vulnerability

ContextCrush: The Context7 MCP Server Vulnerability Hiding in Plain Sight

Gal Moyal

Eli Ainhorn

March 5, 2026

Education

AWS and Noma: Building the Foundation for Secure Enterprise AI

Gal Moyal

Niv Braun

February 26, 2026

Education

What Claude Code Security Actually Does (And How Noma Helps)

Gal Moyal

Roi Alon

February 25, 2026

News

Press release: Noma Security Appoints Ted Plumis as VP of Global Channel and Alliances

Gal Moyal

Alexandra Bush

February 24, 2026

|
News

Why Noma Security is helping build a standard for AI evaluation reporting

Gal Moyal

Gal Moyal

February 17, 2026

|
News

Moltbot: The Agentic Trojan Horse

Gal Moyal

Eli Ainhorn

February 5, 2026

Noma Labs
Research
Vulnerability

DockerDash: two attack paths, one AI supply chain crisis

Gal Moyal

Sasi Levi

February 3, 2026

Noma announces
$100M Series B funding

Noma Security is the fastest-growing company in the AI security category. The round was led by Evolution Equity Partners, with continued participation from Ballistic Ventures and Glilot Capital.

Let's Chat