Tripping Over Heartbleed’s Long Tail

The article reviews the ongoing status of the Heartbleed OpenSSL vulnerability: Qualys data suggests most public web sites have been patched (with roughly 1% still vulnerable), but a long tail of unpatched systems persists—particularly embedded devices, third‑party application libraries, and industrial control software. The piece warns that these hard‑to‑patch systems will remain a persistent insecurity and notes that some criminal groups were slow to patch, creating opportunities for researchers or attackers.