Noma Blog

RufRoot: The MCP Bridge Vulnerability That Turns Agents Into Rogue Admins (CVE-2026-59726)

The goal: Make every agent known, owned, least privileged, context-aware, and auditable; then enforce at runtime.

Gal Moyal

Eli Ainhorn

July 29, 2026

Trust framework logos
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
|
Education

53% of our enterprise customers gave ClawdBot privileged access over the weekend (and no one asked permission)

Gal Moyal

Gal Moyal

January 28, 2026

|
Education

If we can’t “solve” prompt injection, is AI red teaming worth it?

Gal Moyal

Diana Kelley

January 28, 2026

Education

Securing Cursor's agent runtime: how Noma leverages Cursor hooks for real-time AI guardrails

Gal Moyal

Maor Volokh

December 23, 2025

Education

Noma: the standard for autonomous agent security and the OWASP Agentic Top 10

Gal Moyal

Gal Moyal

December 22, 2025

|||
Education
Noma Labs
Research
Vulnerability

GeminiJack: the Google Gemini zero-click vulnerability leaked Gmail, Calendar and Docs data

Gal Moyal

Sasi Levi

December 8, 2025

|The Definitive Guide to Secure Agentic Identity.|
Education

The definitive guide to secure agentic identity

Gal Moyal

Gal Moyal

November 14, 2025

|ChatGPT Atlas|ChatGPT Atlas|ChatGPT Atlas|ChatGPT Atlas|
Education

Atlas shrugged: trust boundaries in the ChatGPT agentic browser

Gal Moyal

Diana Kelley

November 6, 2025

|MCP security blindspots|
Education

The top-five MCP security blindspots putting your organization at risk

Gal Moyal

Gal Pnini

November 5, 2025

|agentic browser security
Education

A CISO’s guide to agentic browser security

Gal Moyal

Diana Kelley

October 27, 2025

Noma announces
$100M Series B funding

Noma Security is the fastest-growing company in the AI security category. The round was led by Evolution Equity Partners, with continued participation from Ballistic Ventures and Glilot Capital.

Let's Chat