Heartbleed - What you need to know

This report explains the OpenSSL Heartbleed vulnerability introduced in OpenSSL 1.0.1, which allows an attacker to read server memory (potentially exposing usernames/passwords, session cookies, and SSL private keys). It emphasizes the large scale impact (widely deployed, cited as affecting ~66% of the Internet), recommends immediate remediation steps (patch OpenSSL, revoke and reissue SSL certificates, change passwords), warns of phishing/scam activity leveraging the issue, and links to external resources and tests to check for infection.