Certificate Interruptus: Survey Finds Heartbleed Fixes Incomplete At Most Firms

One year after the Heartbleed disclosure, Venafi found that roughly 74% of Global 2000 organizations with public-facing systems remained incompletely remediated, leaving approximately 580,000 hosts vulnerable; many firms patched OpenSSL but neglected to revoke/reissue certificates and private keys, preserving the risk of undetectable man-in-the-middle attacks and reuse of stolen keys, with evidence of exploitation and at least one breach linked to Heartbleed.