A Tidal Wave of Java Flaw Exploitation

Posted by Soulskill on Monday October 18, 2010 @08:04AM from the surf's-up dept.

tsu doh nimh writes "Microsoft warned today that it is witnessing a huge spike in the exploitation of Java vulnerabilities on the Windows platform, and that attacks on Java security holes now far outpace the exploitation of Adobe PDF bugs. The Microsoft announcement cites research by blogger Brian Krebs, who has been warning for several months that Java vulnerabilities are showing up as the top moneymakers for those peddling commercial crimeware exploitation kits, such as Eleonore, Crimepack and SEO Sploit Pack." Several days ago, Oracle released a patch that fixed 29 Java security flaws.

2 of 238 comments (clear)

Min score:

Reason:

Sort:

Re:Patches have been available for a long time by lgw · 2010-10-18 08:16 · Score: 4, Insightful

I've run out of space in my head for all the different tools I need to seperately manage updates for.

--
Socialism: a lie told by totalitarians and believed by fools.
Re:Nerd rage by interkin3tic · 2010-10-18 08:19 · Score: 4, Insightful

Honestly? Or is it more likely one individual organization of malware authors suddenly realized that Oracle was being lazy about updating?