Ars Technica

Red October relied on Java exploit to infect PCs

Seriously though, Java!=Applets. It's an amazing language with important applications especially on the server side. Also, for all the complaining about Java, it's the much-beloved Javascript that ...
CSOonline

Java exploit used in Red October cyberespionage attacks, researchers say

The hundreds of government, military and research organizations targeted in a large-scale cyberespionage operation dubbed Red October were not only attacked using malicious Excel and Word documents as ...

Millions of developers could be open to attack after critical flaw exploited - here's what we know

A widely popular npm package carried a critical severity vulnerability that allowed threat actors to, in certain scenarios, ...
CRN

CISA Warns Of SolarWinds Java Exploit

'These types of vulnerabilities are frequent attack vectors,' CISA says in a post online. A government agency is warning about threat actors exploiting a Java deserialization remote code execution ...
InfoWorld

Cyber criminals add new exploit for recently patched Java vulnerability to their arsenal

Cyber criminals were quick to integrate a newly released exploit for a Java vulnerability patched in June into a tool used to launch mass attacks against users, an independent malware researcher ...
The Register on MSN

Cisco warns of 'new attack variant' battering firewalls under exploit for 6 months

Plus 2 new critical vulns - patch now Cisco warned customers about another wave of attacks against its firewalls, which have ...
InfoWorld

Java zero-day vulnerability actively exploited by attackers

An exploit for a previously unknown and currently unpatched vulnerability in Java is being used by cybercriminals to infect computers with malware, according to security researchers. An independent ...
Computerworld

Java zero-day exploit goes mainstream, 100+ sites serve malware

Attackers using two recently-uncovered Java unpatched vulnerabilities, or “zero-days,” have quickly expanded their reach by going mainstream, security experts said today. And on Tuesday, Mozilla, ...
Ars Technica

Attack targeting critical Java bug added to hack-by-numbers exploit kit

"Please, for the love of your computer, disable Java on your browser." This keeps ignoring the fact that very few Mac and Linux machines in the wild actually have the ...
Nextgov

Microsoft: Java worse than PDF as security threat

Java should be considered a top software security threat, even more so than Adobe PDF files, according to Microsoft's announcement issued today. Java should be considered a top software security ...
Krebs on Security

How to Unplug Java from the Browser

Below are instructions for unplugging Java from whatever Web browser you may use to surf the Web. These instructions were originally posted as a how-to in response to this piece: Zero-Day Java Exploit ...