Members of the Open Secure AI Alliance, now comprising more than 120 organizations, are developing new guidelines to strengthen agentic AI cybersecurity as the annual Black Hat conference begins in Las Vegas today. The Linux Foundation shared a Request for Comments on Shared AI Findings Exchange (SAFE), a proposed set of guidelines aimed at turning agentic cybersecurity incidents into shared protection for the entire ecosystem. The SAFE guidelines are being drafted by an Open Secure AI Alliance working group. NVIDIA, Cisco, CrowdStrike, Hugging Face, and Red Hat are among the members contributing to the initial proposal. The SAFE guidelines include proposals to confidentially collect and analyze AI incidents and near misses, inform those impacted, identify recurring control failures, and publish evidence-based operating recommendations that reduce systemic risk.

Cybersecurity is a race without a finish line. Every major technology shift has created new potential attack surfaces. Defenders must move now at agent speed to respond rapidly to protect infrastructure and intellectual property — and the best way to do that is together. When trusted ecosystems share threat intelligence openly, collective defense becomes a force multiplier. NVIDIA’s contributions run the length of the stack, starting with the NVIDIA Labs Object-Oriented Agent (NOOA) research harness, on GitHub — which makes agent behavior easier to test, trace, audit, and govern.

The NVIDIA OpenShell runtime restricts what an agent can see, touch, and do — enforcing security and privacy controls at the agent level, so an agent can’t reach what it shouldn’t. NVIDIA’s open model families — NVIDIA Nemotron for agentic AI, NVIDIA Cosmos for physical AI, NVIDIA Isaac GR00T for robotics, NVIDIA BioNeMo for healthcare and life sciences, and NVIDIA Alp.Mayo, the world’s largest model for autonomous vehicles licensed for commercial use — ship with open weights, datasets, and training techniques. NVIDIA open source verified agent skills extend that trust to the capability layer. Each skill provides portable instruction sets — cataloged, scanned for risks such as prompt injection and tools poisoning, cryptographically signed, and documented with a skill card. Defenders know exactly what an agent skill does, where it came from, and whether it was modified after publication.

NeMo Guardrails, NeMo Anonymizer, and NeMo Safe Synthesizer help enforce safety policies, protect sensitive data, and generate privacy-safe synthetic data. And Garak, NVIDIA’s open source LLM vulnerability scanner, lets security teams check models for data leaks, prompt injections, and jailbreak scenarios before they ship.

Source: nvidia