Mailing the story:
Patched Bash still vulnerable to Shellshock
And the latest is that the bug, now officially known as Shellshock, is being exploited by a computer worm. But nobody seems to know the extent to which the attacks have been successful.