A security breach named "Heartbleed" has put passwords, credit cards and other sensitive data at risk. It affects OpenSSL versions 1.0.1 through 1.0.1f which concern 2/3 of the Web. Put in simple words, any encrypted traffic going over HTTPS is now totally unsecured.