A new security threat has been discovered--Shellshock, also known as the "Bash bug" for affecting the Bash program in Linux and Unix systems. You may have heard of this as it has been compared to Heartbleed, the virus that hacked into data on millions of computers this summer. The main issue that system administrators are experiencing with Shellshock is that it affects "a common bit of code that is used all over the place," according to Robert Graham
, security expert and CEO of Errata Security. Currently, nobody knows exactly how to fix Shellshock and solving the overall problem has been estimated to take months to years, though security companies and even the US Department of Homeland Security have been releasing patches to help aid affected servers.
Continue reading →