#Heartbleed is not gone yet

#Heartbleed is not gone yet

When the Heartbleed vulnerability made headlines last spring, Internet companies went into a frenzy: Creating patches, moving away from OpenSSL, and warning users to reset their passwords.

But while we haven’t heard much about it lately — and many servers have been updated to avoid it — Heartbleed is still very much a problem.

The problem is that OpenSSL is in everything.

“It’s an infrastructure hack, and it’s deep … it puts into question everything that we use on the Internet,” said Sami Nassar, CEO of secure element chip maker NXP.

He calls Heartbleed the death knell for SSL. While some will argue that SSL became obsolete a long time ago, its use is still pervasive. So what’s scary to Nassar is that though the news cycle around Heartbleed ended long ago, the damages are still ravaging on.

Read more at VB News

More than 1 million credit cards may have been compromised in Staples hack

More than 1 million credit cards may have been compromised in Staples hack

Staples says as many as 1.16 million customer credit cards may have been compromised as part of a malware attack on some of its point-of-sale systems earlier this year. Today the company released some of its findings of an investigation into the attacks, saying that malware was found in 113 of its US stores, and may have affected purchases at those locations made between August 10th, 2014 and September 16th, 2014. Staples added that at two stores, the malicious software could have been running unseen for even longer, dating all the way back to late-July.

http://www.appy-geek.com/Web/ArticleWeb.aspx?regionid=3&articleid=33562847