NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework
Summary: NVIDIA and 36 other organizations, including Microsoft, Cisco, Cloudflare, CrowdStrike, Hugging Face, IBM, Palo Alto Networks, Red Hat, and the Linux Foundation, formed the Open Secure AI Alliance to develop open tools for securing software and AI agents across identity, permissions, isolation, guardrails, logs, and model formats. The launch included NVIDIA's NOOA, an Apache 2.0 agent framework that scored 86.8% on the CyberGym L1 vulnerability-rediscovery benchmark using GPT-5.5, but the alliance has no published charter, governing board, workstreams, schedule, or shared repository, and its website is under construction.
What's compelling: NVIDIA's own repository states that NOOA's syntax-tree checks and deny-lists are 'not a containment boundary' and that agents executing generated code must run behind OS-level isolation, so the framework's safety depends on controls the alliance has not yet specified. The alliance's case rests on the July Hugging Face intrusion, where an autonomous agent system compromised production infrastructure and hosted frontier-model APIs rejected the attack artifacts needed for analysis, forcing the company to run open-weight GLM 5.2 on its own hardware.
Read the original at The Hacker News ↗
- Topics
- AI Security
- Related
- SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 8 Cyber Risks · Nov 15, 2026Pentagon Renames CDAO ‘Super Intelligence Office’ Cyber Risks · Nov 15, 2026186 Fake AI Domains Redirect Users to Click Fix Lures, Browser Malware, and Search Hijackers Cyber Risks · Nov 12, 2026