Filter by/
Region/  All
Type/  All
Sorted By/  Most Recent

NSA ‘used Heartbleed for years’

By / / In In the News /

Insiders at the US National Security Agency claim that the organisation has been exploiting the so-called Heartbleed bug for nearly two years to capture datansa-used-Heartbleed-for-years-300x212 on individuals instead of informing the rest of the online community.
The claims, denied by both NSA and White House chiefs, follow whistleblower Edward Snowden’s allegations that it was common practice for the organisation to deliberately introduce vulnerabilities to security software.
NSA spokeswoman Vanee Vines said in an email: “[The] NSA was not aware of the recently identified vulnerability in OpenSSL, the so-called Heartbleed vulnerability, until it was made public in a private-sector cyber security report. The reports that say otherwise are wrong.”
The Heartbleed bug could potentially affect hundreds of thousands of web and email servers which run open source software and has triggered major warnings across the world.
Online users are being urged to change all their passwords and usernames where possible as the bug went undetected for more than two years.
A blog post by Tumblr last week even urged people to “call in sick and take some time to change your passwords everywhere – especially your high-security services like email, file storage, and banking, which may have been compromised by this bug”.

Author: Charlie McKelvey

Leave your thoughts

Related reading

  • Keep up to date with global best practice in data driven marketing

  • This field is for validation purposes and should be left unchanged.