Teen arrested as first alleged hacker to exploit Heartbleed

Summary:A Canadian teenager is in hot water with law enforcement after allegedly becoming the first hacker to exploit the OpenSSL Heartbleed vulnerability.

A Canadian teenager has been arrested and charged as the first hacker to allegedly take advantage of the calamitous Heartbleed security flaw.

Heartbleed made the headlines last week when it came to light as a severe security flaw found within the OpenSSL framework used to secure popular online services, banking and online retail sites worldwide. The security weakness, if exploited, allows hackers to quietly steal sensitive data in vast amounts by communicating with servers.

The flaw affects a large portion of web traffic and companies across the globe have been frantically issuing patches and shoring up systems since the news broke.

On Tuesday, a 19-year-old man in Ontario, Canada, was arrested for allegedly using Heartbleed to hack in to the country's tax agency network, the Canadian Revenue Agency. Computer science student Stephen Solis-Reyes is believed to be the first hacker to take advantage of the break in the widely-used security protocol -- or at least the first to be discovered.

The agency reported earlier this week that 900 social insurance numbers had been compromised due to Heartbleed, and officials managed to trace the source of the intrusion.

Solis-Reyes faces one count of 'Unauthorized Use of Computer systems' and one count of 'Mischief in Relation to Data.'

Read on: Washington Post

Image credit: CNET

This post was originally published on Smartplanet.com

Topics: Innovation


Charlie Osborne, a medical anthropologist who studied at the University of Kent, UK, is a journalist, freelance photographer and former teacher. She has spent years travelling and working across Europe and the Middle East as a teacher, and has been involved in the running of businesses ranging from media and events to B2B sales. Charli... Full Bio

zdnet_core.socialButton.googleLabel Contact Disclosure

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

The best of ZDNet, delivered

You have been successfully signed up. To sign up for more newsletters or to manage your account, visit the Newsletter Subscription Center.
Subscription failed.