US warns of hacker threat from Heartbleed
THE United States government has warned banks, infrastructure operators and other organizations to be on alert for hackers who may take advantage of the “Heartbleed” bug to steal data from vulnerable networks.
On a website for advising critical infrastructure operators about emerging cyber threats, the Department of Homeland yesterday asked organizations to report any Heartbleed-related attacks.
Regulators advised financial institutions to identify any vulnerable systems, patch them, and then test them to make sure they are safe.
The Department of Homeland Security was working with federal, state and local governments to uncover and mitigate potential threats, Larry Zelvin, director of the DHS’s National Cybersecurity and Communications Integration Center, said on the White House website.
“While there have not been any reported attacks or malicious incidents involving this particular vulnerability at this time, it is still possible that malicious actors in cyberspace could exploit unpatched systems,” he said.
The German government released an advisory that echoed the US one, describing the bug as “critical.”
“An attacker can take advantage of the vulnerability and can read the memory contents of the OpenSSL server,” said the notice posted by the German Federal Office for Information Security.
The widespread bug surfaced on Monday, when it was disclosed that a pernicious flaw in a Web encryption program known as OpenSSL left hundreds of thousands of websites open to data theft.
- About Us
- |
- Terms of Use
- |
-
RSS
- |
- Privacy Policy
- |
- Contact Us
- |
- Shanghai Call Center: 962288
- |
- Tip-off hotline: 52920043
- 沪ICP证:沪ICP备05050403号-1
- |
- 互联网新闻信息服务许可证:31120180004
- |
- 网络视听许可证:0909346
- |
- 广播电视节目制作许可证:沪字第354号
- |
- 增值电信业务经营许可证:沪B2-20120012
Copyright © 1999- Shanghai Daily. All rights reserved.Preferably viewed with Internet Explorer 8 or newer browsers.