Normally my policy for the magazine is that if an article has nothing to do with ColdFusion, I won't run it or write it. Unfortunately, things have happened that is making me change this policy in a special case: The cyberwars have started.
Let me explain what I mean by this, and I'll tell you that I'm paranoid. Most programmers are; it's part of the programmer personality. We see patterns, we see the forest rather than just individual trees. We see, or at least we believe we see, what's really going on.
What happened last week? Someone or someones, for money or terrorism or just kicks, started orchestrated attacks on large websites. Now let me pull this all together. I'm afraid (I'm paranoid) that this is the beginning of people, countries, companies, whatever, trying to get ahead on their competition by attacking over the web. And why am I bringing this up? Because there are resources out there that you must know about. Because there is information out there that you must see. Because when somebody comes to your site to attack it, you must be ready. You must have defense. You must read.
So listed below are a number of links. Each of these links should be visited, examined, read, and used. Read and implemented. If someone attacks you and breaks into your site and you were informed of the problem beforehand, it's your own fault.
rain.forest.puppy
SecurityFocus
Packet Storm
Allaire: Security Zone
Microsoft TechNet Security Page