Nordbeam
Blog

Blog

Insights on AI development, software engineering, and digital transformation.

Oct 24, 2026

Bun Security in 2026: The Brotli RCE, Bun 1.4.4 and How to Harden bun install

Bun security in 2026: the Brotli RCE (CVE-2026-111497) fixed in Bun 1.4.4, two more advisories, why npm worms ship Bun, and how to harden bun install.

SecurityBunJavaScript

Oct 24, 2026

13 min read

Node.js Vulnerabilities in 2026: Every CVE, the npm Worms and What to Patch

Node.js vulnerabilities in 2026: the Node2Shell Brotli RCE (CVE-2026-111497), all five security releases, the npm worms and the versions to run today.

SecurityNode.jsnpm

Oct 24, 2026

13 min read

PHP Vulnerabilities in 2026: PHP2Shell, Every CVE and the Versions to Run

PHP vulnerabilities in 2026: PHP2Shell (CVE-2026-109618, CVE-2026-109619), every php-src CVE, Composer and Laravel flaws, and which PHP versions are supported.

SecurityPHPLaravel

Oct 24, 2026

13 min read

Ruby and Rails Vulnerabilities in 2026: KindaRails2Shell, CVEs and What to Patch

Ruby and Rails vulnerabilities in 2026: KindaRails2Shell (CVE-2026-66066), the Ruby regex CVEs, Rack and gem fixes, RubyGems incidents and versions to run.

SecurityRubyRuby on Rails

Oct 7, 2026

12 min read

Human-in-the-Loop AI Agents: Where to Put the Gate

Human-in-the-loop AI agents done right: where to put approval gates, how to bind them to actions, plus evals and audit trails. With a real Fortnox example.

AI AgentsHuman in the LoopGovernance

Jan 15, 2025

12 min read

Building AI Agents That Actually Work: Lessons from Production

Most AI agent projects never make it past the demo. Here's what separates the agents running in production from the abandoned prototypes—and how to build ones that last.

AI AgentsAutomationBusiness

Jan 15, 2025

Staff Augmentation: An Honest Assessment

Most staff augmentation content is vendor marketing. Here's what actually works, what doesn't, and how to avoid the common failures—from both sides of the relationship.

Staff AugmentationIT OutsourcingTeam Building

Jan 10, 2025

10 min read

AI Agents for Enterprise: What IT and Security Teams Actually Need to Know

Enterprise AI agents fail for reasons that have nothing to do with the AI. Here's what security reviews, compliance requirements, and organizational dynamics mean for your implementation.

AI DevelopmentEnterprise AILLM Agents

Jan 5, 2025

Building RAG Systems for Production: Lessons Learned

Practical insights on building Retrieval-Augmented Generation systems that work reliably in production environments.

AI DevelopmentRAGLLM

Dec 20, 2024

React Performance: What Actually Matters

Most React performance advice is premature optimization. Here's how to find real bottlenecks and fix them without making your codebase worse.

ReactPerformanceFrontend

Dec 15, 2024

AI in E-commerce: What Actually Works (And What Doesn't)

Most e-commerce AI projects fail. Here's what separates the 28% conversion improvements from the abandoned initiatives—based on real implementations.

E-commerceAI DevelopmentRetail Technology

Dec 10, 2024

Tech Stack Decisions: What We Actually Use and Why

Forget framework comparison charts. Here's how we actually choose technologies after building software for a decade, and why our defaults might surprise you.

TechnologySoftware ArchitectureWeb Development