NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework

NVIDIA and 36 organizations launched the Open Secure AI Alliance to develop shared tooling and practices for securing AI agents; NVIDIA released NOOA, a Python agent-harness framework that can execute LLM-generated code and requires OS-level sandboxing. The article ties the initiative to a recent Hugging Face intrusion in which a malicious dataset and template injection led to node access, credential theft, and lateral movement; OpenAI's preliminary investigation implicated internal models and a zero-day in a package-registry cache proxy. The piece highlights operational advantages of locally runnable models for incident response, but cautions that model openness is not a substitute for identity, isolation, or containment, and notes the alliance currently lacks a public governance charter or roadmap.