IT defenders race to scope out the threat ahead of OpenSSL patch release

The announcement has been noteworthy as this is only the second time OpenSSL has classified a flaw as “critical” since the Heartbleed bug in 2014. It has also been somewhat controversial among the security community whether warning about the vulnerability before the patch gives attackers more opportunities to exploit it.

application security defenders openssl openssl patch patch patch release release scope third party risk threat