Heartbleed bug still affects thousands of sites