Ruby on Rails ActiveStorage KindaRails2Shell (CVE-2026-66066) AAR - ATLRUG

Frank and Wren from Rietta Cybersecurity will present an after-action review (AAR) of KindaRails2Shell (CVE-2026-66066), the ActiveStorage vulnerability that shook the Rails world in July 2026. Attacks started within hours of the patch release. Teams had to patch extremely fast to stay ahead. The data that came out in the following weeks shows this was a watershed moment. AI-assisted exploit development has compressed the window between disclosure and exploitation, and critical patching has to keep up. We’ll walk through what happened, what we saw, and what it means for how Rails teams handle security updates going forward. Read our write-up at https://rietta.com/blog/ruby-on-rails-cve-exploited-hours-after-patch/ We look forward to sharing more with the group. The Atlanta Ruby Meetup is our monthly ONLINE main event. Schedule: 6:30pm - 7:00pm: Connect to the Google Meet and chat with other Rubyists 7:00pm - 7:45 pm: Presentation 7:45pm - 8pm: Time for questions and chit chat Interested in Speaking? Want to show off your Ruby project or Ruby-related technology? Want to suggest a topic? Let us know!