WOULDN’T SURPRISE ME: Report: NSA Exploited Heartbleed to Siphon Passwords for Two Years.
Earlier: Heartbleed Bug: Public urged to reset all passwords.