Authors
The Rustine team
The blog's articles are signed by the team that builds Rustine, the security scanner for apps built with AI. Here is how we write them.
How we work
Primary sources first
NVD entry, vendor advisory, CISA's KEV catalog, official documentation. Every article links its sources, so you can check.
Written for people who code with AI
What happens, how to tell whether you are affected, and the prompt to paste into your agent to fix it. The answer comes first.
Reviewed by a human before publishing
Drafts are prepared with AI tools, then checked and reviewed by a human. The review date is shown on the article.
Updated when things move
A new fixed version, a new advisory: the article is revised and its update date changes. Spotted a mistake? Write to us.
No attack payloads
We explain the vulnerability and its fix, never how to exploit it. Like the scanner: read-only.
A correction, a source to add: contact@rustine.io
Latest articles
CVE-2026-109618: Check Your PHP Version Today
Two critical PHP RCE flaws (CVE-2026-109618, CVE-2026-109619) were patched October 21. How to check your PHP version and update before attacks start.
Is Cursor Safe? What to Check Before You Ship
Is Cursor safe? The app is: SOC 2 Type II, ISO 27001, and no training on your code by default. The real risk is the code it writes. Here's what to check.
Security Headers: How to Check and Fix Them
Learn which security headers matter, how to check yours in two minutes, and the exact config to paste into Next.js, Vercel, or Netlify.
Vibe Coding Security Checklist: 12 Checks Before You Ship
12 security checks for a vibe-coded app, in the order they leak on launch day, with copy-paste prompts for your AI coding agent.
Vibe Coding Security Risks: What Your AI Assistant Gets Wrong
Vibe coding ships fast, but AI assistants get security wrong more often than you'd expect. The real risks, the numbers, and prompts to fix them.
Is Lovable Secure? What to Fix Before You Launch
Lovable is secure; your app is only as safe as its Supabase config. The real risks of Lovable apps and the checks to run before launch.