Security

Tests confirm Heartbleed bug can expose server’s private key

CloudFlare said its challenge shows how dangerous is the OpenSSL bug

Looks like maybe the NSA did know about Heartbleed …

Here are the options with Heartbleed-flawed networking gear (Hint: there aren’t many)

NSA denies knowing about Heartbleed flaw for years

The agency disputes a report that it used Heartbleed to conduct surveillance

How you need to respond to Heartbleed, and how you can explain it to others

IRS misses XP deadline, pays Microsoft millions for patches

Tax collector has 58,000 PCs still running the aged XP; will spend $30M to upgrade to Windows 7

Tip of the Hat: Heartbleed exposes an open source failing

The OpenSSL open source project created a widely used encryption package, but lacks the funds and volunteers needed to support it

Heartbleed flaw affects mobile apps, too

Many banking, mobile payment apps connect to servers vulnerable to OpenSSL flaw, says Trend Micro

US takes out gang that used Zeus malware to steal millions

Zeus malware used to attack Bank of America, First National Bank of Omaha and others

Entrust offer new certificates in wake of Heartbleed