Heartbleed

Heartbleed still hurting hard. UK council fined £100,000 after data breach

A UK city council has been hit by a £100,000 fine after it suffered an embarrassing data breach as a result of not patching...
Graham Cluley
0 sec read

Heartbleed is not dead. And isn’t likely to be any time soon

The people who cared about fixing their systems against the Heartbleed vulnerability did it long ago. The others simply don't give a damn.
Graham Cluley
33 sec read

Heartbleed is far from dead. 200,000+ vulnerable devices on the internet

Clearly, some manufacturers and IT teams have dropped the ball, and failed to update vulnerable systems My bet is that there will always be devices...
Graham Cluley
1 min read

OpenSSL patched against high severity denial-of-service bug, and other flaws

Phew! The high severity OpenSSL bug is not another Heartbleed, but a denial-of-service flaw instead. Make sure you learn about it (and other vulnerabilities fixed)...
Graham Cluley
1 min read

Heartbleed blamed for hack that put 4.5 million patients at risk

Heartache for Community Health Systems, as an unpatched Juniper device is blamed for serious security breach.
Graham Cluley
1 min read

More security flaws discovered in OpenSSL. Patch now!

Remember the Heartbleed scare which had you scurrying to change your passwords and worrying about online privacy a few weeks ago? Well, it looks like...
Graham Cluley
1 min read

Post-Heartbleed: What should you be doing about passwords?

The Heartbleed bug could be the perfect opportunity for you and your company to take another look at passwords, and make a change for...
Graham Cluley
0 sec read

Heartbleed: Teenager charged after Canadian taxpayer hack

A 19-year-old man has been charged in connection with a hack using the Heartbleed bug which leaked 900 social insurance numbers, and caused a...
Graham Cluley
1 min read

Up to 50 million Android devices could be vulnerable to Heartbleed attack. Here’s how to check yours

Millions of Android smartphones and tablets are at risk of being attacked via the Heartbleed bug, more than a week after the security vulnerability...
Graham Cluley
1 min read

Heartbleed claims British mums and Canadian tax payers as victims

The critical Heartbleed security vulnerability in OpenSSL continues to raise alarm, with websites now warning that hackers have breached their systems by exploiting the...
Graham Cluley
0 sec read

Heartbleed bug *can* expose private SSL keys

If you administer a server and have so far put off revoking and reissuing your SSL certificates, it might be time to think again. If...
Graham Cluley
1 min read

The NSA knew about Heartbleed bug for two years, claims report

Has the United States’ National Security Agency (NSA) really known about the Heartbleed bug (and presumably exploiting it for surveillance purposes) for two years?...
Graham Cluley
0 sec read

Heartbleed bug explained by xkcd in a way anyone can understand

It's simply amazing how amazingly simple this XKCD cartoon is at explaining what the Heartbleed bug is all about.
Graham Cluley
18 sec read

In the wake of Heartbleed, watch out for phishing attacks disguised as password reset emails

It wouldn't be a surprise if phishers used the Heartbleed scare as a way of tricking users into revealing their passwords. Be careful what you...
Graham Cluley
0 sec read

Here’s some really bad Heartbleed bug advice about changing your passwords

A lot of folks are going around at the moment telling the public to change all of their passwords in response to the serious...
Graham Cluley
1 min read

Heartbleed OpenSSL bug: An FAQ for Mac, iPhone and iPad users

In the last couple of days you cannot fail to have seen the huge number of media articles about the so-called Heartbleed bug. In this...
Graham Cluley
0 sec read