Heartbleed is the bug that just won't go away.
The bug put a million Web servers at risk two months ago. Millions of people had their personal information compromised on affected websites. Patches to fix the problem were sent, and people hoped for the best.
But Heartbleed still is hanging on because some sites haven't applied patches.
[I]t's likely that the lightly-trod corners of the internet will remain vulnerable for many years to come, as sites with sub-par security standards continue to leave themselves — and their users — exposed. The danger is particularly real now since the exploit has been widely publicized.
You need to protect yourself now, especially since some sites aren't doing it for you. Here's more about why Heartbleed is dangerous and what you can do to protect yourself.