CISA details twin attacks on federal servers via unpatched ColdFusion flaw

CISA has released details about a federal agency that recently had at least two public-facing servers compromised by attackers exploiting a critical Adobe ColdFusion vulnerability. The vulnerability, tracked as CVE-2023-26360, was disclosed in March and was shortly after added to CISA's known exploited vulnerability (KEV) …

[Yorick Hunt]

Cold Fusion?

The technology most of the world abandoned when Macromedia was dragged under the waves by the apex predator? Esoteric doesn't mean invulnerable. Still, it could've been worse - they could've been using WordPress.

[Matthew 25]

Re: Cold Fusion?

You're right. I hadn't realised it was still a thing.