A major flaw in the World Wide Web, known as 'Heartbleed' Bug, has been found in the OpenSSL (open-source software package), broadly used to encrypt Web communications, putting every computer at risk.
The major flaw can essentially allow attackers to gain access to highly sensitive information, including credit card numbers, usernames, passwords, and other sensitive data.
According to TechCrunch, the vulnerability allows attackers to steal the information that is normally protected by SSL/TLS encryption, which is used to protect Web applications, e-mail communications, instant messaging (IM) and some virtual private networks (VPNs).
That means a lot of Internet users are affected.
Nicholas Weaver, a security researcher, said that there will be a lot of vulnerable servers a year from now, which won't get fixed.
In an emailed statement, Yahoo said Heartbleed was recently identified impacting many platforms that use OpenSSL, including the company's.
It added that as soon as the company became aware of the vulnerability they successfully made the appropriate corrections across the main Yahoo properties (Yahoo Homepage, Yahoo Search, Yahoo Mail, Yahoo Finance, Yahoo Sports, Yahoo Food, Yahoo Tech, Flickr and Tumblr), the report added.
You’ve reached your limit of {{free_limit}} free articles this month.
Subscribe now for unlimited access.
Already subscribed? Log in
Subscribe to read the full story →
Smart Quarterly
₹900
3 Months
₹300/Month
Smart Essential
₹2,700
1 Year
₹225/Month
Super Saver
₹3,900
2 Years
₹162/Month
Renews automatically, cancel anytime
Here’s what’s included in our digital subscription plans
Exclusive premium stories online
Over 30 premium stories daily, handpicked by our editors


Complimentary Access to The New York Times
News, Games, Cooking, Audio, Wirecutter & The Athletic
Business Standard Epaper
Digital replica of our daily newspaper — with options to read, save, and share


Curated Newsletters
Insights on markets, finance, politics, tech, and more delivered to your inbox
Market Analysis & Investment Insights
In-depth market analysis & insights with access to The Smart Investor


Archives
Repository of articles and publications dating back to 1997
Ad-free Reading
Uninterrupted reading experience with no advertisements


Seamless Access Across All Devices
Access Business Standard across devices — mobile, tablet, or PC, via web or app
