We just released update 11 for ColdFusion 10. Details here: ColdFusion 10 Update 11. Quite an impressive list of fixes. This also includes a security fix for the web sockets thing that Adam Cameron found a few days ago. (Correction - Adam blogged about it, but Henry Ho found it. Sorry Henry!) For folks running ColdFusion 9, there is a separate security hot fix you should deploy.