https://rietta.com/categories/case-study/ Recent content in Case Study on Rietta Cybersecurity Hugo -- gohugo.io en-us 1999-2026 Rietta Inc. All Rights Reserved. https://rietta.com/blog/ruby-on-rails-cve-exploited-hours-after-patch/ Fri, 04 Sep 2026 12:55:00 -0400 https://rietta.com/blog/ruby-on-rails-cve-exploited-hours-after-patch/ After hours on Wednesday, July 29, 2026, Rietta executed our emergency hotfix procedure across our entire client base for sites impacted by a severe remote code execution vulnerability in ActiveStorage, a component of Ruby on Rails 8 and newer. We worked off the initial GitHub Security Advisory, published the same day the patch shipped. Ethiack, one of the research teams that discovered the flaw, dubbed it KindaRails2Shell (CVE-2026-66066) in their initial disclosure post that same day, July 29th, with a full technical deep-dive following the next day on July 30th. https://rietta.com/blog/air-gap-windows-code-review-training/ Mon, 05 May 2025 08:00:00 -0500 https://rietta.com/blog/air-gap-windows-code-review-training/ Client Background Our partner, New Oceans Enterprises, is led by Donna Gallaher, an experienced cybersecurity leader with extensive executive experience. New Oceans Enterprises was engaged by a client in a regulated industry to act as their vCISO. The task was to develop a comprehensive security program to comply with their customer security requirements and regulatory demands. This client was mandated to undergo a thorough security audit for contract compliance. One stumbling block was that the architecture of their solution was not aligned with the assumptions made by the mandate. https://rietta.com/blog/google-datastore-conversion-to-postgresql/ Wed, 24 Jul 2024 08:00:00 -0500 https://rietta.com/blog/google-datastore-conversion-to-postgresql/ Client Background Our client is a State government agency operating a variety of custom web applications used by staff and elected officials for critical business functions. These applications, developed over the years by various contractors, serve as vital tools for the agency’s operations. All of this data was tied up in a Google Cloud service that was sunset and discontinued without a replacement, and without migration tooling from either Google or AWS, the two largest cloud providers in the world. https://rietta.com/blog/on-prem-to-aws-elastic-container-service/ Tue, 04 Oct 2022 08:00:00 -0500 https://rietta.com/blog/on-prem-to-aws-elastic-container-service/ Client Background Client is a State government agency. They operate a variety of custom web applications that are used by staff and elected officials for critical business functions. These applications have been developed over the years by various contractors. Client’s Tech Stack Prior to the engagement with Rietta, client already had a full-stack Ruby on Rails web application that was built by a previous contractor. The application was deployed to an on-prem virtualized Linux server using Capistrano over SSH. https://rietta.com/blog/document-generation-in-pure-open-source/ Mon, 26 Sep 2022 11:00:00 -0500 https://rietta.com/blog/document-generation-in-pure-open-source/ Client Background Client is an SaaS provider for the insurance industry. They have a small team of full time developers and contractors working to build and maintain a solution for their insurance industry customers. The application has a need to fill in details in Microsoft Word and Microsoft Excel spreadsheet templates that can then be downloaded by users as both editable files and rendered as printable PDF documents. Client’s Tech Stack Prior to the engagement with Rietta, client already had a SaaS solution built in the Ruby on Rails web application framework. https://rietta.com/blog/dockerized-cost-savings/ Wed, 21 Jul 2021 07:00:00 -0500 https://rietta.com/blog/dockerized-cost-savings/ We’ve written much about Docker on this website in the last year, but today I wanted to share with you from an agency owner’s perspective. Last year, we made the decision to invest heavily in Dockerizing the web applications that we maintain. We decided to implement Docker not just for ease of deployment but, more importantly, to improve our development team’s efficiency at code base swapping. We made a substantial cash investment in research and development to make this happen and are starting to see the investment pay dividends.