Noma Blog

RufRoot: The MCP Bridge Vulnerability That Turns Agents Into Rogue Admins (CVE-2026-59726)

The goal: Make every agent known, owned, least privileged, context-aware, and auditable; then enforce at runtime.

Gal Moyal

Eli Ainhorn

July 29, 2026

Trust framework logos
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
||
Noma Labs
Research
Vulnerability

ForcedLeak: AI agent risks exposed in Salesforce Agentforce

Gal Moyal

Sasi Levi

September 25, 2025

|||CrewAI vulnerability|
Noma Labs
Research

Uncrew: understanding the risk behind a leaked internal GitHub token at CrewAI

Gal Moyal

Sasi Levi

September 24, 2025

RiskRubric.ai blog post
Technical

Introducing riskrubric.ai: the risk scorecard for every AI model

Gal Moyal

Rhett Glauser

September 17, 2025

|RiskRubric total score histogram|RiskRubric model failure rate|RiskRubric Histogram of AI Safety
Technical

RiskRubric.ai methodology: a technical framework for AI model risk assessment

Gal Moyal

Gal Moyal

September 16, 2025

MCP servers via ChatGPT
Education

Critical recommendations for the secure use of MCP servers via ChatGPT

Gal Moyal

Gal Moyal

September 11, 2025

Invisible MCP Risk|
Research

Invisible risk: Unicode exploits in MCP and the AI supply chain

Gal Moyal

Sasi Levi

September 10, 2025

Education

The risk of destructive capabilities in agentic AI

Gal Moyal

Gal Moyal

September 10, 2025

LLM security
Education

Lessons in transparency and LLM Security from the Anthropic threat intel report

Gal Moyal

Gal Moyal

August 28, 2025

Ralph Pisani appointed Noma Security CRO
News

Press release: Noma Security appoints Ralph Pisani as Chief Revenue Officer

Gal Moyal

Noma Security

August 19, 2025

Noma announces
$100M Series B funding

Noma Security is the fastest-growing company in the AI security category. The round was led by Evolution Equity Partners, with continued participation from Ballistic Ventures and Glilot Capital.

Let's Chat