Today (or round about today), the ColdFusion docs published a new guide, the CFML Developer Security Guide (PDF) by the amazing Pete Freitag. This is a great companion to the lockdown guide (pdf) also written by Pete. Both should be considered required reading.