Free Ruby Security Workshop
Summary: Trail of Bits is hosting a free Ruby Security Workshop in NYC on Thursday, June 6th, timed to SummerCon, with signups first-come, first-serve and space for 30 people. Led by Hal Brodigan, the workshop covers recent Ruby on Rails vulnerability classes, their root causes, and exercises in which students develop exploits for real-world vulnerabilities.
What you should know: The post states that many new vulnerabilities and vulnerability classes have been discovered in Ruby applications over the last year, using Ruby-specific features and common idioms such as YAML serialization and deserialization, and that because these classes were first found in well-studied open source software, they are extremely likely to occur across the Ruby ecosystem.
Read the original at Trail of Bits Blog ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026