Next week I'm teaching an an online ColdFusion developer security training class.
It will be held on Tuesday December 9, 2025 @ 11am-2pm & Wednesday December 10 @ 11am-2pm US Eastern Time. There are still a few seats left if you'd like to join last minute here's
a coupon code: lastchance25 for 25% off.
New Topic: AI Security
One thing that is clear is that AI is making its way into the jobs of software developers. Whether you are tasked with using it to help you code faster, or building systems that leverage it, there are some things that you need to be aware of to avoid security issues.
As a result I've put together some new content related to AI Security. We'll cover things like prompt injection, guardrails, the lethal trifecta, and the OWASP LLM Top 10 list.
What Other Topics are Covered?
Beyond the new AI topics, we'll also cover the classic CFML code security topics, such as:
- Core Security Principals
- Proactive Coding Guidelines
- OWASP Top 10
- SQL Injection
- Remote Code Execution
- Path Traversals & File Path Vulnerabilities
- File Upload Vulnerabilities
- Cross Site Scripting
- Cross Site Request Forgery
- Session Hijacking
- Cookie Security
- Password Storage
- Authentication
- Authorization
- Content Security Policy
- Timing Attacks
- Scope Injection
- LDAP Injection
- XML Security Issues
- Security Tools: OWASP Zap, Fixinator
- And more!
Seats are Limited
Don't wait, only a few days left to register: join the class.