Beware Ransomware Attacks on Very Old ColdFusion Servers (CF9 and 8)

It’s always risky to run old versions of software, of course, and that problem is hitting home for those who may still be running very old versions of Adobe ColdFusion, such as CF9 (released in 2009) or 8 (from 2007) if they failed to apply a hotfix that Adobe had provided in 2010.  A recent spate of ransomware attacks has occurred, hitting such vulnerable servers, as reported in the various security industry press.

If you’re still running ColdFusion 9 or 8 (which really, you should not be), you can learn more about the fix that Adobe had made available in 2010, as well as in Cumulative Hotfixes that followed it.

For more on who’s affected, and who’s not, and what you can do if you’re still on CF9 or 8, as well as more about the attack, see my post with much more detail.

CF blogger Charlie Arehart