Modern ColdFusion Exploitation and Attack Surface Reduction

Explore the security landscape of Adobe ColdFusion in this 42-minute conference talk from BSidesLV. Delve into the recent developments in ColdFusion security, including newly discovered 0-day vulnerabilities and the role of older vulnerabilities in ransomware attacks. Gain insights into the attack surface of modern ColdFusion environments and learn strategies for reducing potential vulnerabilities. Whether you're working with CFML, managing legacy applications, or conducting penetration testing, discover valuable information about ColdFusion's security challenges and solutions. For those less familiar with ColdFusion, the talk also offers parallels to Java security concepts.