Heartbleed Hack Still a Threat Six Months After Discovery

Hundreds of thousands of corporate computer servers, routers and other Internet devices worldwide remain vulnerable to the Heartbleed Web-security flaw nearly six months after its existence was disclosed, security researchers say. "We expect that the most sophisticated attackers will use this at the time of their liking," Kevin Bocek, vice president for security strategy and threat intelligence at the Sandy, Utah-based company, in a phone interview. The biggest public company known to be hacked through Heartbleed was Community Health Systems Inc. (CYH), which disclosed Aug. 18 it had been attacked in April and June. Separately, Errata Security, a consulting company based in Atlanta, Georgia, scanned publicly available devices on the Internet on June 20 and found as many as 300,000 routers, servers and other Internet devices were still vulnerable.

via Business News http://ift.tt/1nDhtaJ