CSOonline

Java exploit used in Red October cyberespionage attacks, researchers say

The hundreds of government, military and research organizations targeted in a large-scale cyberespionage operation dubbed Red October were not only attacked using malicious Excel and Word documents as ...
ARN

Cybercriminals using digitally signed Java exploits to trick users

Security researchers warn that cybercriminals have started using Java exploits signed with digital certificates to trick users into allowing the malicious code to run inside browsers. A signed Java ...
Ars Technica

Red October relied on Java exploit to infect PCs

Seriously though, Java!=Applets. It's an amazing language with important applications especially on the server side. Also, for all the complaining about Java, it's the much-beloved Javascript that ...
InfoWorld

Java zero-day vulnerability actively exploited by attackers

An exploit for a previously unknown and currently unpatched vulnerability in Java is being used by cybercriminals to infect computers with malware, according to security researchers. An independent ...
Computerworld

Java zero-day exploit goes mainstream, 100+ sites serve malware

Attackers using two recently-uncovered Java unpatched vulnerabilities, or “zero-days,” have quickly expanded their reach by going mainstream, security experts said today. And on Tuesday, Mozilla, ...
Nextgov

Microsoft: Java worse than PDF as security threat

Java should be considered a top software security threat, even more so than Adobe PDF files, according to Microsoft's announcement issued today. Java should be considered a top software security ...
InfoWorld

Cyber criminals add new exploit for recently patched Java vulnerability to their arsenal

Cyber criminals were quick to integrate a newly released exploit for a Java vulnerability patched in June into a tool used to launch mass attacks against users, an independent malware researcher ...
Ars Technica

Two new Flash exploits surface from Hacking Team, combine with Java 0-day

Java doesn't exist on my system, so I'm okay there. As for Flash, thank goodness for NoScript. This should be a default set of tools for every browser on the market. Everyone should just enable "click ...
CRN

CISA Warns Of SolarWinds Java Exploit

'These types of vulnerabilities are frequent attack vectors,' CISA says in a post online. A government agency is warning about threat actors exploiting a Java deserialization remote code execution ...
ZDNet

Microsoft warns of Java exploit rise

There has been a rapid expansion in the amount of malware that attempts to exploit Java code, according to Microsoft. In the second quarter of 2010, Microsoft Malware Protection Center had detected ...
Bleeping Computer

Exploit available for critical bug in VM2 JavaScript sandbox library

Proof-of-concept exploit code has been released for a recently disclosed critical vulnerability in the popular VM2 library, a JavaScript sandbox that is used by multiple software to run code securely ...