Introduction In this post I'm going to cover the technical details of a security sandbox escape technique that affects Adobe ColdFusion ...

 In May I had the pleasure of attending my first CFCamp , where I spoke about CFML security. The slides from my talk --  Understanding CFML ...

"Hola, amigos. How’s it hangin’? I know it’s been a long time since I last rapped at ya, but I've been busier than a feather plucke...

A ColdFusion security patch released two days before Christmas?  I have a feeling that may have resulted in many sysadmins shouting "Fi...

Thank you to BSidesLV for the opportunity to speak this year.  The slides from my talk,  Modern ColdFusion Exploitation and Attack Surface ...

Introduction Access Control is frequently boring but important.  It's one of the core security services defined in the OSI Security Arch...

Last Friday it was an absolute honor to talk about ColdFusion security at Summercon .  Summercon was the first security conference I attende...

Background  Imperva SecureSphere Web Application Firewall (WAF) is an on-premise security solution to inspect, monitor and block traffic to ...