Update: ShellShock’s Long Tail in the Enterprise

Executive summary: The article describes the ShellShock Bash vulnerability — a remotely exploitable flaw that permits attackers to execute arbitrary commands by embedding malicious code in environment variables (e.g., HTTP headers). It emphasizes the high severity (NIST rated 10/10), the widespread exposure of Linux-based web servers and legacy applications, the relative triviality of exploitation, and the practical difficulties organizations face in locating and patching all affected systems despite available fixes.