HeartBleed in the Wild

SucuriBlog reports on HeartBleed in the Wild

"After 10 days of massive coverage, we expected to see every server out there patched against it. To confirm our expectations, we scanned every web site listed in the Alexa top 1 million rank. Yes, we scanned the top web sites in the world to see how many were still infected.

The results were interesting:

• Top 1,000 sites: 0 sites vulnerable (all of them patched)
• Top 10,000 sites: 53 sites vulnerable (only 0.53% vulnerable)
• Top 100,000 sites: 1595 sites vulnerable (1.5% still vulnerable)
• Top 1,000,000 sites: 20320 sites vulnerable (2% still vulnerable)

We were glad to see that the top 1,000 sites in the world were all properly patched, and that just 0.53% of the top 10k still had issues. However, as we went to less popular (and smaller) sites, the number of unpatched servers grew to 2%. That is not surprising, but we expected better."

Seems pretty good to me.