First Java 0-Day In 2 Years Exploited By Pawn Storm Hackers

An anonymous reader writes with Help Net Security's report that a new zero-day vulnerability in Java is being exploited, quoting from which: The flaw was spotted by Trend Micro researchers, who are closely monitoring a targeted attack campaign mounted by the economic and political cyber-espionage operation Pawn Storm. The existence of the flaw was discovered by finding suspicious URLs that hosted the exploit. The exploit allows attackers to execute arbitrary code on target systems with default Java settings. Until a patch is made, disabling Java is the recommended course of action.

Comments

There hasn't been a zero day?

[Anonymous Coward]

There hasn't been a zero day for Java in two years?

If that's true, that sounds like the real news here.

Here we go again.

[sproketboy]

It's an exploit in the Java Plugin - not Java itself but whatever - let's get the Oracle hate going.