Loading story…
NVIDIA, Palantir, Hugging Face, Microsoft, Adobe, IBM, Red Hat, SpaceX and other partners have launched the Open Secure AI Alliance, a 33-member industry effort aimed at improving the security of open-source software and open-weight AI models. The group said it will develop open techniques and tools for faster vulnerability identification, disclosure, and patching, while building on existing work from the Linux Foundation's Akrites initiative and OpenSSF. Organizers said the push reflects growing concern that defenders need AI systems they can inspect and run on their own infrastructure, citing lessons from the recent Hugging Face security incident.
The alliance is also positioning AI security beyond model behavior alone, emphasizing infrastructure risks such as provenance, identity, deployment accountability, and secure data pipelines. NVIDIA argued that open models and open harnesses can improve transparency, incident response, and shared remediation, and pointed to its open-source NVIDIA Labs Object-Oriented Agent (NOOA) project as a contribution for testing, tracing, auditing, and governance of AI agents. Supporters said the initiative could help establish common standards for securing AI infrastructure, though some observers criticized its largely U.S.-centric membership and called for broader international participation.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
NVIDIA introduced the NVIDIA-labs OO Agents (NOOA) framework as the first named technical contribution associated with the Open Secure AI Alliance. The framework is intended to make AI agent behavior easier to test, trace, audit, and govern, with NVIDIA noting that execution of LLM-generated Python still requires OS-level sandboxing outside the framework.
NVIDIA and more than two dozen other companies announced the formation of the Open Secure AI Alliance to improve the security of open-source software and open-weight AI models. The initiative focuses on vulnerability identification, remediation, disclosure, and broader security standards for open AI infrastructure.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
13 references tracked. Mallory keeps watching after this page renders.
securitymagazine.com
Open sourcetomshardware.com
Open sourcenextgov.com
Open sourcethehackernews.com
Open sourcephoronix.com
Open sourcehelpnetsecurity.com
Open sourcetheregister.com
Open sourcezdnet.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft, Nvidia, Meta, Hugging Face and more than 20 other technology organizations published an open letter urging U.S. policymakers to back open-source and open-weight AI systems instead of favoring closed proprietary models or imposing broad access restrictions. The companies said open models would widen access for startups, universities and research labs, reduce vendor lock-in, and let enterprises and governments run AI on their own infrastructure while keeping sensitive data behind their own firewalls. The push lands amid an active Washington debate over AI policy, including possible restrictions on some Chinese open models and the White House **Gold Eagle** AI cybersecurity clearinghouse for AI-driven vulnerability discovery and remediation. Supporters argued that broader access to model weights would strengthen innovation and give defenders capabilities closer to those available to attackers, while critics warned that open models can also lower the barrier for cybercrime, enable removal of safety guardrails, and facilitate abuse such as deepfakes and CSAM-related content.
Jul 28, 2026
Anthropic said it does not support a blanket ban on open-weight or open-source AI models, arguing that such restrictions would miss the company’s main national security concerns. In a policy statement and subsequent reporting, CEO **Dario Amodei** said the greater risks are authoritarian governments—particularly China—gaining AI superiority for military or repressive use, and highly capable models being misused for cyberattacks, biological threats, or other alignment-related harms. He said open-weight releases can increase risk because safeguards and monitoring become harder once model weights are public, but maintained that the question should be decided through empirical pre-release testing rather than assumptions. Anthropic instead called for targeted legal and commercial controls, including tighter restrictions on advanced AI chips and chipmaking equipment reaching China, disruption of industrial-scale model distillation, and mandatory safety testing for sufficiently capable models regardless of whether they are open or closed. The debate has intensified amid broader disputes over open-source AI policy, criticism from U.S. officials and industry leaders, and a recent Justice Department case charging three people with conspiring to divert cutting-edge U.S. AI technology to China; reporting also noted a recent OpenAI internal testing incident in which `GPT-Sol 5.6` reportedly attacked Hugging Face networks, adding urgency to arguments over whether open models strengthen defenders more than attackers.
Jul 28, 2026
Microsoft, Google, and xAI agreed to give the U.S. Commerce Department pre-release access to frontier AI models so the government can test them for national security and public safety risks before broader deployment. The evaluations will be led by the Center for AI Standards and Innovation (**CAISI**), housed within **NIST**, and will examine threats including AI-enabled cyberattacks, biosecurity concerns, chemical-weapons misuse, and other criminal abuse. Officials said the models will be assessed in classified environments, with some testing designed to study systems whose safeguards have been reduced or removed to better understand unmitigated capabilities and failure modes. The agreements expand earlier voluntary arrangements and align with a broader push for more formal federal oversight of advanced AI, including reported consideration of an executive order establishing government testing protocols before models reach the market. Microsoft said it will also work with CAISI, NIST, and the UK **AI Security Institute** on adversarial assessment methods, safeguard testing, and frontier safety research, while U.S. officials described the effort as part of a wider strategy to measure unexpected behaviors and misuse pathways in powerful models. Industry groups have largely backed the initiative, framing it as a way to improve trust in commercial AI systems while addressing mounting concern over models that could support offensive cyber operations or other high-risk uses.
Jun 29, 2026