JT Book a call

Blog / Tags

security

9 posts tagged security, newest first.

aistartupcode-review

Your Dev Shop Says the Code Was Reviewed. By What?

Copilot now takes part in more than one in five code reviews on GitHub. The research says AI reviewers earn their keep - and that the tuning which makes them usable suppressed about a fifth of real vulnerabilities on a standard benchmark.

· Paul Keen
railssecuritycve

Rails CVE-2026-66066: Patch Isn't Enough

CVE-2026-66066 lets an unauthenticated upload read server files via Active Storage. Patching Rails is not enough - libvips must go to 8.13 and secrets rotate.

· JetThoughts
railssecuritycve

Rails 7 End of Life: Pick Your Exit

Rails 7.1 got no patch for CVE-2026-66066, a CVSSv4 9.5 pre-auth RCE. How to find every app of yours on a dead branch and pick between four realistic exits.

· JetThoughts
foundersnon-technical-foundercourse-companion

Slopsquatting: The 2025 Supply-Chain Attack

AI assistants suggested 200+ package names that did not exist. Attackers registered them. Your $34K MVP pulled malware. The CI gate that stops it cold.

· JetThoughts Team
railsrubysecurity

Rails CVE-2026-41316: Detection and Patch

CVSS 8.1 universal RCE chain through ERB::DeprecatedInstanceVariableProxy and Marshal.load. Detection, upgrade path, Rails 7.0/7.1 EOL options.

· JetThoughts
aifoundersecurity

9 Seconds: An AI Agent Wiped a Live SaaS

On April 25, 2026, an AI coding agent at PocketOS deleted the production database and its on-volume backups in 9 seconds. Here's what your dev shop should learn.

· JetThoughts
railsrubysecurity

Rails `has_secure_password` with Argon2: Complete Migration Guide

Step-by-step guide to enabling Argon2 with has_secure_password in Rails. Migrate from BCrypt with zero downtime using the Hybrid Verifier pattern in production.

· JetThoughts Team
railsauthenticationdevise

Rails 8 Authentication Generator: Complete Migration from Devise

Master the migration from Devise to Rails 8's built-in authentication system. Complete guide with step-by-step migration, security best practices, and production deployment strategies.

· JetThoughts Team
LangChainCrewAIEnterprise AI

From Prototype to Production: Scaling LangChain and CrewAI Applications in Enterprise Environments

Complete enterprise guide to scaling LangChain and CrewAI from prototype to production. Covers architecture patterns, security, compliance, monitoring, and real-world case study with 80% improvement metrics.

· JetThoughts Team

Tell us what you need built

JetThoughts has been building software since 2008. Book a call, or write to sales@jetthoughts.com. You'll leave the call with a written one-page scope within 2 working days.

#01 Paul Keen
Paul KeenChief Technology Officer & Open Source Contributor

A 30-minute call; pick a time.