Although April Fools day recently passed, this is no April Fools joke. One of the most major security threats to the internet as a whole was on display for all to see. This vulnerability is listed as “zero-day” because the software developers have had zero days to fix them when the vulnerability was discovered.
On Monday, April 7th, 2014, a major bug in OpenSSL was revealed which allows attackers to read information from the memory from servers that had OpenSSL installed. Roughly 66% of the internet uses this application to secure your data. Northwoods Web Designs uses OpenSSL as well but was not using the version(s) that were vulnerable.
What is the Heartbleed bug?
This security bug takes advantage of a bug in OpenSSL (all programming applications have bugs, yes even Apple and Microsoft), which allows any normal user to read information that was stored in memory without any additional privileges on the server.
Read More