I hold a talk about Rails 3 Security at the RailsWayCon10. It is about the new Cross-Site Scription protection in Rails 3, what is going to change in ActiveRecord and other Rails Security topics. You can find the presentation at Slideshare.
Ruby on Rails Security Updated (Rails 3) at RailsWayConView more presentations from heikowebers.