Does Your Business Need to Worry About the Heartbleed Bug?

In early April, online tech outlets began reporting about Heartbleed, a new online threat to password security. In the subsequent weeks many companies warned users to change their passwords, and news outlets picked up the story in an attempt to warn Internet travelers of the dangers Heartbleed could pose. If you are an IT professional, you have likely been bombarded with questions about this threat from your friends, your co-workers, and your company.

To understand Heartbleed, you first need to understand OpenSSL

OpenSSL is a security standard used to encrypt the communication between you and the online services you use.

In short, it is what makes you feel safe sending sensitive or private information to your bank, your email, your social media accounts, or your online cloud storage solution. OpenSSL is a widely used technology, adopted by web giants such as Facebook, Google, and Yahoo.

Heartbleed exploits a feature of OpenSSL called “heartbeat.” As illustrated in the comic below from XKCD, when you access a website your computer communicates with a server. As part of this communication, the server responds to your computer to let it know that the server is active and available.This back-and-forth (the heartbeat) is a data exchange.

Heartbleed Explanation - Dynamic Quest

 

Typically the server will only send back requested data, but servers affected by the Heartbleed bug are open to send back much more data, which is what hackers are using to access encrypted information from the server (up to 65,536 bytes).

Anti-Virus software won’t protect your business from Heartbleed

That’s because it isn’t a computer virus. Heartbleed is a bug or programming error that leaves data unencrypted using OpenSSL exposed to hackers.

You can’t “get” Heartbleed on your computer or server, and you aren’t safe from it just because you use an anti-virus program or firewall.

Should I be worried about Heartbleed?

Most major online services (Yahoo, Google, Microsoft, Facebook) have reacted quickly to upgrade their OpenSSL software version, so simply changing your password on those services should be enough. You might also consider using a password manager for enhanced security in the future.

Here’s what you can do to protect your company from Heartbleed

If you are worried about your business’ security, and whether your and data might be compromised, give us a call.

We’ve helped several of our clients secure themselves against Heartbleed, and assured others that they were fine, removing the stress of not knowing.


Managed Services
Managed IT Managed Service Desk Managed Cloud Services Managed Security Services Managed Backup and Disaster Recovery VOIP Phone Systems
Professional Services Page
IT Projects Migration Services Office 365 Development Business Systems Support Azure Cloud Solutions Anything as a Service (XAAS) Carrier Services
Archives by Subject

40% of businesses will incorporate the anywhere operations model to accommodate the physical and digital experiences of both customers and employees (Techvera).

More than 33 billion records will be stolen by cybercriminals by 2023, an increase of 175% from 2018.

It takes an average of 287 days for security teams to identify and contain a data breach, according to the “Cost of a Data Breach 2021” report released by IBM and Ponemon Institute.

Forty-three percent of attacks are aimed at SMBs, but only 14% are prepared to defend themselves (Accenture).

The three sectors with the biggest spending on cybersecurity are banking, manufacturing, and the central/federal government, accounting for 30% of overall spending (IDC).

The cost of cybercrime is predicted to hit $10.5 trillion by 2025, according to the latest version of the Cisco/Cybersecurity Ventures “2022 Cybersecurity Almanac.”.

The average cost of a data breach in the United States is $8.64 million, which is the highest in the world, while the most expensive sector for data breach costs is the healthcare industry, with an average of $7.13 million (IBM).

The internal team was energized. With the Level 1 work off its plate, the team turned its attention to the work that fueled company growth and gave them job satisfaction.

Large Healthcare Company

We did a proof of concept that met every requirement that our customer might have. In fact, we saw a substantial improvement.

Steve Fout, VP Sales, Godlan, Inc

We did everything that we needed to do, financially speaking. We got our invoices out to customers, we deposited checks, all the things we needed to do to keep our business running, and our customers had no idea about the tragedy. It didn’t impact them at all.

Denise Koontz, CFO, Got You Floored

“We believe our success is due to the strength of our team, the breadth of our services, our flexibility in responding to clients, and our focus on strategic support.”

Dynamic Quest

Our Vendors