The Italian investigation of Expedia and its rival Booking.com follows similar actions in the U.K., France and Germany
Some reissued SSL certificates use the same vulnerable key as the ones they replace, and some sites moved to a vulnerable version of OpenSSL
Stored files are vulnerable to cut-and paste clumsiness or to links embedded in shared documents
