Modernize or Die® - CFML News Podcast for March 5th, 2024 - Episode 212

2024-03-05 Weekly News — Episode 212

Watch the video version on YouTube at https://youtube.com/live/Vg81ar7GfW4?feature=share

Hosts: 

• Gavin Pickin - Senior Developer at Ortus Solutions
• Daniel Garcia - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions
The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. 
A few ways to say thanks back to Ortus Solutions:

• Buy workshop tickets to CF Summit East
• Buy Tickets to Into the Box 2024 in Washington DC https://www.intothebox.org/
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review AND WE WILL READ IT ON THE SHOW
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon! In hardcover too!!!
  • https://www.amazon.com/dp/B0CJHB712M
  • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support (phenomenal)

We have 46 patreons:
 
https://www.patreon.com/ortussolutions.

News and Announcements

Whitehouse Mandate - Press Release: Future Software Should Be Memory Safe
Leaders in Industry Support White House Call to Address Root Cause of Many of the Worst Cyber Attacks
Today, the White House Office of the National Cyber Director (ONCD) released a report calling on the technical community to proactively reduce the attack surface in cyberspace. ONCD makes the case that technology manufacturers can prevent entire classes of vulnerabilities from entering the digital ecosystem by adopting memory safe programming languages. ONCD is also encouraging the research community to address the problem of software measurability to enable the development of better diagnostics that measure cybersecurity quality.
Full Report:  https://www.whitehouse.gov/wp-content/uploads/2024/02/Final-ONCD-Technical-Report.pdf
Blog Post: https://www.whitehouse.gov/oncd/briefing-room/2024/02/26/press-release-technical-report/

Three Recent Lucee Vulnerabilities
Last week, Harsh Jaiswal and Rahul Maini from ProjectDiscovery released some impressive security research on multiple vulnerabilities in Lucee (and Mura CMS and Masa CMS).  Their blog post is a must-read, and I'm not going to rehash their steps from research to discovery to exploitation.  Instead, I'm going to look at these vulnerabilities through a defensive lens. 
https://www.hoyahaxa.c