Triumfant Detects Heartbleed Bug on the Endpoint — Underscores Need for Endpoint Breach Prevention and Complete Defense-in-Depth Strategy

The recently discovered Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library that allows cybercriminals to steal information that would normally be protected by the SSL/TLS encryption used to secure the Internet.  While the industry is scrambling to fix the problem and patch the hole, which was revealed just this week but has been around for more than two years, Heartbleed represents a much bigger security issue — it demonstrates that traditional perimeter security is not enough and that security breaches are inevitable.  A new approach is needed, one that combines network security measures (firewall, IPS/IDS, sandbox) with the endpoint. 


Heartbleed is a defect in the OpenSSL implementation that allows the attacker to obtain random chunks of memory data by simply asking.  While the industry collectively works to remediate the Heartbleed bug and shore-up systems, Triumfant’s memory process scanner, the first ever Advanced Volatile Threat (AVT) module to detect and stop in-memory malware attacks, can be used by organizations to detect if the version of OpenSSL being used on any computer has the exploit.  In the mad dash to upgrade to the latest version of OpenSSL free from Heartbleed (Open SSL 1.0.1g or later) Triumfant can help organizations guarantee that the version of OpenSSL used on computers throughout the enterprise is not the one susceptible to this exploit. 

Rapid detection is the new prevention.  Organizations must allocate resources to finding and containing threats once adversaries have gained access.  With Triumfant organizations can create a multi-faceted defense against today’s most advanced cyber threats in RAM and on the hard drive. Attacks happen, but compromises don’t have to become a full breach.  Endpoint security is the final frontier of defense, with solutions like Triumfant picking up where network-based tools fall short. 

John Prisco, CEO of Triumfant