Box patches Heartbleed flaw in its cloud storage systems

The company is also telling customers to change their passwords

Box has patched the Heartbleed security hole on its servers and has advised its customers to change their passwords.

The cloud-storage and file-sharing vendor introduced the vulnerability into its systems earlier this year when it started using an affected version of OpenSSL, the company said.

"To date, we have no indication that Box has been targeted or attacked in relation to this bug and we have not detected any malicious activity," wrote Box official Joel de la Garza.

Box patched its systems hours after learning about the bug last week. It also revoked and reissued its SSL certificates.

The technology industry went into emergency mode last Monday when it was revealed that a severe flaw existed since December 2011 in several versions of the OpenSSL cryptographic library used by millions of websites to encrypt their communications via SSL (Secure Sockets Layer) and TLS (Transport Layer Security). The flaw was patched on Monday.

Since then, companies that provide services via their websites have been scrambling to patch servers, because, if exploited, the flaw could allow an attacker to monitor information exchanged between end users and the affected systems and steal critical data.

Box is strongly suggesting that its customers turn on two-factor authentication and requiring that its users set strong passwords. The company is also encouraging customers to configure the single sign-on capability if they use Box with partners' third-party software that has been pre-integrated with Box.

Box has about 25 million registered users, of which about 1.75 million use a paid version of the service via corporate or individual accounts. The company has about 34,000 paying corporate customers, including more than 40 percent of the Fortune 500 and 20 percent of Global 2000 companies.

The Los Altos, California, company, founded in 2005, announced in March that it plans to go public.

Juan Carlos Perez covers enterprise communication/collaboration suites, operating systems, browsers and general technology breaking news for The IDG News Service. Follow Juan on Twitter at @JuanCPerezIDG.

Join the PC World newsletter!

Error: Please check your email address.

Tags storagesecurityBox.netSoftware as a servicecloud computinginternet

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Juan Carlos Perez

IDG News Service
Show Comments

Essentials

Microsoft L5V-00027 Sculpt Ergonomic Keyboard Desktop

Learn more >

Lexar® JumpDrive® S57 USB 3.0 flash drive

Learn more >

Mobile

Lexar® JumpDrive® S45 USB 3.0 flash drive 

Learn more >

Exec

HD Pan/Tilt Wi-Fi Camera with Night Vision NC450

Learn more >

Audio-Technica ATH-ANC70 Noise Cancelling Headphones

Learn more >

Lexar® Professional 1800x microSDHC™/microSDXC™ UHS-II cards 

Learn more >

Lexar® JumpDrive® C20c USB Type-C flash drive 

Learn more >

Budget

Back To Business Guide

Click for more ›

Most Popular Reviews

Latest News Articles

Resources

GGG Evaluation Team

Michael Hargreaves

Windows 10 for Business / Dell XPS

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Kathy Cassidy

STYLISTIC Q702

First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni

STYLISTIC Q572

For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?