New Bugs Found in Heartbleed Cyber ​​Threat Software

Experts said that the newly discovered loophole, OpenSSL, allows hackers to monitor communications, but it does not appear to pose a serious threat to "Heartbleed." The new bug was disclosed on Thursday and asked to be responsible for development research. The software released OpenSSL update contains seven security patch groups.
Websites and technology companies using OpenSSL technology should install updates on their systems as soon as possible. However, experts say it may take days or weeks because companies need to test the system first to ensure that they are compatible updates. Li Weiner, senior vice president of network security software maker Rapid7, said: "They will have to patch. It will take some time."
About two-thirds of Web sites using OpenSSL technology, including those from Amazon, Facebook, Google, and Yahoo, also include tens of thousands of companies’ technology products, including Cisco, Hewlett-Packard, IBM, Intel, and Oracle. The widespread "Heartbleed" error revealed when the potential flaws in April, user websites and technology exposure may attract hackers to steal large amounts of data without leaving a trace. This puts users and technology in fear that an attacker could damage a large number of networks.
Security experts said on Thursday that newly discovered bugs are more threatening than "Heartbleed." However, Tal Klein, vice president of cloud security company Adallom strategy, said that until technology updates their user systems, there is a "window of opportunity" for sophisticated hackers to launch attacks.