Going by this article http://www.zdnet.com/article/sloppy-programming-leads-to-openssl-woes/ if on openSSL 1.1.0a, better get on 1.1.0b, and if on 1.1.0i, better race over to 1.1.0j.

It is good that they voluntarily/were forced to do this (don't know the situation). In my opinion, it is like a company that has dumped toxic waste having to clean up. God only knows what copied versions of those OS are spewing out.

This month had 20 'updates' to W8.1, 3 automatic, 17 'optional', which included one that sets for future updates to be as obscured as the W10 roll-up packages. The optional would never get installed unless manually selecting.

Was reading yesterday about websites using your computer through your browser to mine cryptocoinage, and reflected back on some websites that did cause the browser to go into high CPU usage for no reason, even a big on line retailer (Who claimed to not know about it!). The easy was having the AdBlock extension, adding a line of block code, the distributor claiming there is already a block rule in place, but since having switched recently to the much faster Vivaldi browser, added the chrome extension "No Coin".

Just in case, if they those highjackers can do this, they could do other stuff too, thus, just in case you'd like to make doubly sure to disallow the activity: https://thenextweb.com/apps/2017/09/19/cpu-cryptocurrency-miner-blocker/

Edit: More detail from AdBlock and how to add block filters: https://adblockplus.org/blog/kicking-out-cryptojack . In Fact there's a filter subscription for No Coin that can be added to AdBlock at https://adblockplus.org/subscriptions#type_other . Just pick Subcribe: No Coin

Major alert on macOS password security bug: http://www.bbc.com/news/technology-42161823

"Apple has said it is working to fix a serious bug within its Mac operating system."

BTW, You cant make this up:

"However, a member of Apple's support forums had posted details of the flaw more than two weeks ago, though the message appears to suggest the vulnerability could be a useful feature for troubleshooting rather than a critical security threat."

TSIB