‘Heartbleed’ Bug Exposes Passwords, Web Site Encryption Keys

Summary: Researchers found a critical vulnerability in OpenSSL versions 1.0.1 through 1.0.1f that lets anyone on the Internet read the memory of vulnerable systems, exposing secret keys, usernames, passwords and content. Netcraft counted more than a half million vulnerable sites, including Yahoo.com and openssl.org, and a simple exploit circulating online retrieves private memory in 64kb chunks.
Why it matters: Affected providers must replace private keys and certificates after patching, not just apply the fix, because anything the flaw already exposed stays compromised until those secrets are swapped out.

Read the original at Krebs on Security ↗

Topics: Data Breaches
Related: TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026
Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026
City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026