Attackers have developed a way to exploit Heartbleed in an SSL VPN, bypassing multifactor authentication to gain remote access to an organization’s internal network, according to researchers at security firm Mandiant, the consulting and incident response arm of network security vendor FireEye.
↧