This is a serious problem and the worst part is that individual users can't do anything about it.

Heartbleed bug found in OpenSSL software prompts tech companies to urge passwords reset - ABC News (Australian Broadcasting Corporation)

 

BrianB,

has anyone been, or has any heard of, or seen, any actual news of anyone scammed by this?

I haven't. And therefore have assumed that this is the usual journalistic, sensationalist beat-up.

 

I don't think it's a total beatup.
They definatley sensationalse it though.
It is a genuine threat and the only thing you
can really do is keep a very close watch on
your credit card account, just in case.

 

Brian,
Considering that it's been there for 2 years and there hasn't been worldwide financial fraud running amuck, it's fair to say that it wasn't being used by those with criminal gain in mind.

However the ability to grab data packets from all manner of secure transmissions would be very handy to those involved in covert activities and given the recent Snowdon revelations, my money says the balance of probability points towards our "five eyes" friends.

It's just another back door in the software and hardware that regular schmucks like us can't do anything / or worry about.