HeartBleed - Open SSL Security Threat

This blog defines oOpen SSL security threat.

HeartBleed

OpenSSL security threat called Heartbleed helps attacker to gain access to secure information which is transmitted via https. OpenSSL threat is only applicable to sites which are running https and only if the https uses OpenSSL library internally.

How to check if your site is affected by Heartbleed:

a> Use Heartbleed test (https://filippo.io/Heartbleed/)

b> LastPaa Heartbleed checker (https://lastpass.com/heartbleed/)

Ways to prevent Heartbleed :

1. Apply an upgrade to OpenSSL

2. Disable Hearbeat from current installed SSL

References :

• troyhunt

• The Heartbleed Bug