Slashdot Mirror

← Back to Stories (view on slashdot.org)

A Tidal Wave of Java Flaw Exploitation

Posted by Soulskill on from the surf's-up dept.

tsu doh nimh writes "Microsoft warned today that it is witnessing a huge spike in the exploitation of Java vulnerabilities on the Windows platform, and that attacks on Java security holes now far outpace the exploitation of Adobe PDF bugs. The Microsoft announcement cites research by blogger Brian Krebs, who has been warning for several months that Java vulnerabilities are showing up as the top moneymakers for those peddling commercial crimeware exploitation kits, such as Eleonore, Crimepack and SEO Sploit Pack." Several days ago, Oracle released a patch that fixed 29 Java security flaws.

3 of 238 comments (clear)

  1. This article speaks the truth by gman003 · · Score: 5, Funny

    I'm still in the process of repairing my Windows system after a Java-transmitted virus. A hacked website was sending out malware to visitors via Java applet, and the only solution I found was a format/reinstall. Since then, I've disabled Java on all my machines; the only things I've seen it used for are crappy browser games and malware.

  2. Re:Patches have been available for a long time by Anonymous Coward · · Score: 5, Funny

    I've run out of space in my head for all the different tools I need to seperately manage updates for.

    Sounds like you need a computer.

  3. Re:Patches have been available for a long time by Ant+P. · · Score: 5, Funny

    I guess Windows isn't ready for the desktop.