Man-in-the-middle exploit taking advantage of fallback to SSL 3.0, disclosed on October 2014.