<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:14pt"><div class="" style=""><a href="https://www.yahoo.com/tech/here-we-go-again-new-vulnerability-discovered-in-87983540829.html" class="" style="">https://www.yahoo.com/tech/here-we-go-again-new-vulnerability-discovered-in-87983540829.html</a><br style=""></div><div style="color: rgb(0, 0, 0); font-style: normal; background-color: transparent;" class=""><span style="font-size: 18px; color: rgb(34, 34, 34); line-height: 26px;"><br></span></div><div style="color: rgb(34, 34, 34); font-style: normal; font-size: 18px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent;" class=""><span style="font-size: 18px; color: rgb(34, 34, 34); line-height: 26px;">BOSTON — Security researchers have uncovered new bugs in the Web encryption software that caused the pernicious “Heartbleed” Internet threat that
surfaced in April.</span><br></div><div style="margin-top: 1.5em; margin-bottom: 1.5em; color: rgb(34, 34, 34); line-height: 26px;" class=""><span style="font-size: large;" class="">Experts said the newly discovered vulnerabilities in OpenSSL, which could allow hackers to spy on communications, do not appear to be as serious a threat as Heartbleed.</span></div><div style="margin-top: 1.5em; margin-bottom: 1.5em; color: rgb(34, 34, 34); line-height: 26px;" class=""><span style="font-size: 18px;" class="">The new bugs were disclosed on Thursday as the group responsible for developing that software released an OpenSSL update that contains seven security fixes.</span></div><div style="margin-top: 1.5em; margin-bottom: 1.5em; color: rgb(34, 34, 34); line-height: 26px;" class=""><span style="font-size: large;" class="">Experts said that websites and technology firms that use OpenSSL technology should install the update on their systems as quickly as possible.
Still, they said that could take several days or weeks because companies need to first test systems to make sure they are compatible with the update.</span></div><div style="margin-top: 1.5em; margin-bottom: 1.5em; color: rgb(34, 34, 34); line-height: 26px;" class=""><span style="font-size: large;" class="">"They are going to have to patch. This will take some time," said Lee Weiner, senior vice president with cybersecurity software maker Rapid7.</span></div><div style="margin-top: 1.5em; margin-bottom: 1.5em; color: rgb(34, 34, 34); line-height: 26px;" class=""><span style="font-size: large;" class="">OpenSSL technology is used on about two-thirds of all websites, including ones run by Amazon.com, Facebook, Google, and Yahoo. It is also incorporated into thousands of technology products from companies, including Cisco Systems, Hewlett-Packard, IBM, Intel, and Oracle.</span></div><div style="margin-top: 1.5em; margin-bottom: 1.5em; color: rgb(34, 34,
34); line-height: 26px;" class=""><span style="font-size: large;" class="">The widespread Heartbleed bug surfaced in April when it was disclosed that the flaw potentially exposed users of those websites and technologies to attack by hackers who could steal large quantities of data without leaving a trace. That prompted fear that attackers may have compromised large numbers of networks without their knowledge.</span></div><div style="margin-top: 1.5em; margin-bottom: 1.5em; color: rgb(34, 34, 34); line-height: 26px;" class=""><span style="font-size: large;" class="">Security experts said Thursday that the newly discovered bugs are more difficult to exploit than Heartbleed, making those vulnerabilities less of a threat.</span></div><div style="margin-top: 1.5em; margin-bottom: 1.5em; color: rgb(34, 34, 34); line-height: 26px;" class=""><span style="font-size: large;" class="">Still, until users of the technology update their systems, “there is a window
of opportunity” for sophisticated hackers to launch attacks and exploit the newly uncovered vulnerabilities, said Tal Klein, vice president of strategy with cloud security firm Adallom.</span></div><div style="color: rgb(0, 0, 0); font-size: 19px; font-family: 'times new roman', 'new york', times, serif; font-style: normal; background-color: transparent;" class=""><br class="" style=""></div></div></body></html>