Some of the world’s leading sites are vulnerable to an easier, more simplified attack.
Category: secure sockets layer
Bug allowing execution of malicious code resides in TLS stack.
Open source tool tests connections for crypto flaws.
Fraudulent credentials for additional domains may also exist in the wild.