Noma Customer Support Agent Cascade Attack Pattern
Date: 2025-10
Affected: Enterprise Customer Support Agents (various)
Attack vector: tool-abuse
Category: research
Severity: Critical

Noma documented attack pattern where harmless-looking customer support agent, once compromised, cascades into unauthorized money transfers, sensitive data exfiltration, and malicious emails for lateral movement.


Mitigations:

Architectural layers (MAESTRO):