Bash programme is command shell which tell computer what to do. Shellshock is flaw in the bash software that allows hacker to take control of your computer and run any program or install anything on your computer by using commands. This means that hacker can access your personal information too.
Security expert Robert Graham said in his tweet that
I think i was Wrong, Shellshock was as big as Heartbleed. Its bigger.
Graham also told that this bug is dangerous for internet connected devices because there softwares are built using scripts. They are less likely to be patched and hence are more likely vulnerable.
Heartbleed was discovered in April and was from OpenSSL bug but this bug is even serious because it allows hackers to steal information from computers.
Lots of work is being done on this issue and many companies are working to develop patches for this vulnerability. It still is widely discussed and reportedly more bigger issue than that of heartbleed.
But there is good news for Windows users that it does not affects them much as it majorily is for Mac and other products because Windows do not on Bash.
