On a catastrophic scale of 1 to 10, the Heartbleed OpenSSL bug is an 11
Heartbleed is a catastrophic bug in OpenSSL: … Basically, an attacker can grab 64K of memory from a server. The attack leaves no trace, and can be done multiple times to grab a different random 64K of memory.
Schneier on Security Bruce Schneier
Related Coverage
- The Heartbleed Bug, explained Vox · Timothy B. Lee
- Heartbleed: mundane coding error more devastating than fancy crypto attacks like BEAST, CRIME A Few Thoughts … · Matthew Green
- Heartbleed Security Flaw Emphasizes the Need to Change Passwords New York Times · Steve Lohr
- ‘Heartbleed’ bug undoes Web encryption, reveals Yahoo passwords CNET · Stephen Shankland
- Netcraft None
- Fortune None
- The Register None
- Business Insider None
- DSLreports None
- BBC None
- Graham Cluley None
- Krebs on Security None
- Gizmodo None
- Telegraph None
- ExtremeTech None
- TrendLabs Security … None
- Los Angeles Times None
- avast! blog None
- memeburn None
- NEWS.com.au None
- BuzzFeed None
- A List Apart None
- Netcraft Netcraft · Paul Mutton
- Fortune Fortune · Andrew Nusca
- The Register The Register · John Leyden
- Business Insider Business Insider · Steve Kovach
- DSLreports DSLreports · Karl Bode
- BBC BBC
- Graham Cluley Graham Cluley
- Krebs on Security Krebs on Security · Brian Krebs
- Gizmodo Gizmodo · Jamie Condliffe
- Telegraph Telegraph · Agencies
- ExtremeTech ExtremeTech · Sebastian Anthony
- TrendLabs Security Intelligence Blog TrendLabs Security Intelligence Blog · Pawan Kinger
- Los Angeles Times Los Angeles Times · Salvador Rodriguez
- avast! blog avast! blog · Deborah Salmi
- memeburn memeburn
- NEWS.com.au NEWS.com.au · Alex Kidman
- BuzzFeed BuzzFeed · Charlie Warzel
- A List Apart A List Apart · Tim Murtaugh
- ReadWrite None
- Ars Technica None
- BGR None
- CNN None
- ZDNet None
- The Wire None
- Wall Street Journal None
- Reuters None
- Globe and Mail None
- TIME None
- VentureBeat None
- Silicon Republic None
- Coder in a World of Code None
- Gigaom None
- Business Insider None
- Gotta Be Mobile None
- Guardian None
- SlashGear None
- The Verge None
- ReadWrite ReadWrite · Lauren Orsini
- Ars Technica Ars Technica · Dan Goodin
- BGR BGR · Zach Epstein
- CNN CNN · Heather Kelly
- ZDNet ZDNet · Larry Seltzer
- The Wire The Wire · Abby Ohlheiser
- Wall Street Journal Wall Street Journal · Danny Yadron
- Reuters Reuters · Jim Finkle
- Globe and Mail Globe and Mail
- TIME TIME · Doug Aamoth
- VentureBeat VentureBeat · Dylan Tweney
- Silicon Republic Silicon Republic
- Coder in a World of Code Coder in a World of Code · Daniel Turner
- Gigaom Gigaom · Mathew Ingram
- Gotta Be Mobile Gotta Be Mobile · Warner Crocker
- Guardian Guardian · Alex Hern
- SlashGear SlashGear · Chris Burns
- The Verge The Verge · Russell Brandom
- ZDNet None
- F-Secure Antivirus … None
- BetaNews None
- Graham Cluley None
- Electronic Frontier Foundation None
- Matt's Life Bytes None
- Tor None
- InfoQ None
- CoinDesk None
- Crittercism None
- Joseph Scott None
- Cisco Blog None
- Freedom of the Press … None
- The Register None
- GitHub None
- Naked Security None
- Ars Technica None
- LinuxInsider None
- SSegurança None
- F-Secure Antivirus Research Weblog F-Secure Antivirus Research Weblog · Jarno
- BetaNews BetaNews · Ian Barker
- Electronic Frontier Foundation Electronic Frontier Foundation · Yan Zhu
- Matt's Life Bytes Matt's Life Bytes · Matthew Sullivan
- Tor Tor
- InfoQ InfoQ · Alex Blewitt
- CoinDesk CoinDesk · Nermin Hajdarbegovic
- Crittercism Crittercism · Paul Lappas
- Joseph Scott Joseph Scott
- Cisco Blog Cisco Blog · Panos Kampanakis
- Freedom of the Press Foundation Freedom of the Press Foundation · Bill Budington
- GitHub GitHub
- Naked Security Naked Security · Paul Ducklin
- LinuxInsider LinuxInsider · Richard Adhikari
- SSegurança SSegurança · Sandro Süffert
- NEWS.com.au None
- Poynter None
- Poynter Poynter · Andrew Beaujon
- WebProNews None
- Computerworld None
- ZDNet None
- PandoDaily None
- SiliconBeat None
- Lifehacker None
- Threatpost None
- WebProNews WebProNews · Val Powell
- Computerworld Computerworld
- PandoDaily PandoDaily · Nathaniel Mott
- SiliconBeat SiliconBeat · Levi Sumagaysay
- Lifehacker Lifehacker · Whitson Gordon
- Threatpost Threatpost · Dennis Fisher