I'm thrilled to be speaking at DistrictCon in late January 2026. My talk will cover some recent language-level vulnerabilities in ColdFusion that allow attackers to control variables that they should not be able to, allowing them to control application flow. Often to scary results.