An independant source has released a report on the security of the new version of Coldfusion, with the conclusion being “ColdFusion 8 exhibits a high degree of resilience to application layer attacks with no compromise on functionality provisioned by the new features.”

There is also mention of the new Authentication and Authorization model ( you can now have more than one login for the coldfusion administration)  and that it has raised the security of the overall product.

Here is the report http://www.dcooper.org/ColdFusion_8_Product_Security_Brief.pdf