Slashdot Mirror
First Java 0-Day In 2 Years Exploited By Pawn Storm Hackers
An anonymous reader writes with Help Net Security's report that a new zero-day vulnerability in Java is being exploited, quoting from which: The flaw was spotted by Trend Micro researchers, who are closely monitoring a targeted attack campaign mounted by the economic and political cyber-espionage operation Pawn Storm. The existence of the flaw was discovered by finding suspicious URLs that hosted the exploit. The exploit allows attackers to execute arbitrary code on target systems with default Java settings. Until a patch is made, disabling Java is the recommended course of action.
There hasn't been a zero day for Java in two years?
If that's true, that sounds like the real news here.
I was just going to suggest everyone just change their brand of coffee! Problem solved
Build a Man a Fire, and He'll Be Warm for a Day. Set a Man on Fire, and He'll Be Warm for the Rest of His Life.
The PROBLEM with disabling Java, is that a significant majority of sites use it heavily
Uh, really? Can you name one website that uses Java heavily?
Here is one: Verify your Java Version