shellshock

The effects of Shellshock so far are hard to measure .

到目前为止，Shellshock漏洞造成的影响还很难评估。

The threat of the Shellshock bug can be mitigated by updating , or patching , computer systems .

通过升级电脑系统——或者为系统打上补丁——可以消除Shellshock漏洞的威胁。

But that will take time , as IT teams rush to work out which systems need updating , and Shellshock may be one of many vulnerabilities in the basic architecture of the internet .

不过这么做需要花上一段时间，因为IT团队必须赶紧分析出哪些系统需要更新，而且Shellshock漏洞可能只是互联网基础设施的诸多漏洞之一。

They include Heartbleed , which was also a vulnerability in the way websites form secure connections to send information , and more recently Shellshock , which had existed for over two decades .

此前发现的漏洞包括“心脏出血”（Heartbleed）漏洞，它也是网站在建立安全链接以便传递信息的过程中出现的漏洞。其他还包括Shellshock漏洞，这个漏洞已存在了逾20年。

There is already some evidence posted on Github , an online forum for software engineers , that the Shellshock bug has been used in an attack , though it is not known where or when .

在用户主要为软件工程师的在线论坛Github上，已有人发布证据，显示Shellshock漏洞已被用在一次网络攻击中。不过，这次攻击发生的时间和地点还不清楚。

The Shellshock bug that has left vast swaths of the internet vulnerable to cyber criminals for more than 20 years highlights how the basic foundations of the network are not fit for the 21st century web , security experts have warned .

安全专家警告说，Shellshock漏洞暴露了互联网在超过20年的时间里为网络犯罪分子留下的大量可乘之机，这凸显出最基本的网络基础设施已经不适应21世纪网络的需要。