A bloody mess: Vast majority of organizations are still vulnerable to Heartbleed

76-percent of the Global 2000’s public-facing systems are still vulnerable to Heartbleed, according to research from Venafi. The OpenSSL flaw was fully disclosed on April 7, 2014. Venafi’s research shows that 74-percent remain vulnerable to the flaw. An attacker could gain access to SSL private keys, usernames and passwords submitted to applications or services running on the server, or session tokens and cookies. The most notable attack was the one against Community Health Systems (CHS), where the flaw was used to gain. CHS blamed actors in China known as APT 18.”]

Source: https://www.csoonline.com/article/2906871/a-bloody-mess-vast-majority-of-organizations-are-still-vulnerable-to-heartbleed.html