Java

First Java zero-day in two years exploited by Pawn Storm hackers

July 13, 2015

Another zero-day vulnerability is being exploited in attacks spotted in the wild: this time, the targeted software is Java.The flaw was spotted by Trend Micro researchers, who …

New Java vulnerabilities remotely executable without login

April 16, 2015

It is extremely important that enterprises urgently patch their Java Runtime Environments (JREs) and (Java Development Kits) JDKs since 14 vulnerabilities addressed in this …

Google blocks Java plugin in new Chrome by default

April 15, 2015

Google has released Chrome 42 to the stable channel, and among the changes announced is one that will automatically block Oracle’s Java plugin and other plugins that use …

Large malvertising campaign linked to potentially compromised Google ad reseller

April 8, 2015

Dutch infosec firm Fox IT has spotted a lage scale malvertising campaign that seems to originate from Bulgarian Google ad reseller EngageLab. The first redirection has been …

The weak links in an increasingly dynamic threat landscape

August 5, 2014

The Cisco 2014 Midyear Security Report, released today at Black Hat, examines the “weak links” in organizations – outdated software, bad code, abandoned …

49% of security pros think Java apps are vulnerable to attacks

July 17, 2014

In a recent poll, half of the senior IT professionals polled said their Java applications are vulnerable (32%) or very vulnerable (17%) to attacks. They cited insecure coding …

Oracle delivers 113 updates

July 16, 2014

Oracle’s Quarterly Critical Patch Update (CPU) is never a minor event. In April we saw 104 security issues addressed, in January it was 144. This time around we are …

Java program to reverse Android ransomware damage

June 17, 2014

University of Sussex student Simon Bell has reverse-engineered the Android Simplocker (Simplelocker) ransomware, and has created a Java program that can be converted into an …

Details for 30 Oracle Java Cloud Service flaws revealed

April 3, 2014

Polish security start-up Security Explorations has publicly released technical details and Proof-of-Concept code for 30 security vulnerabilities they found in Oracle Java …

Oracle releases Java 8

March 20, 2014

Oracle has released Java Standard Edition (SE) 8, Java Development Kit (JDK) 8, and Java Runtime Environment (JRE) 8. The new releases work on Windows 8, Windows 7, Windows …

Account-hijacking Trojan spreads via Facebook messages

March 12, 2014

Private messages delivering what seems to be an image are spreading like wildfire on Facebook, as the file in question triggers the download of a Trojan that compromises the …

Windows, IE, Java are most vulnerable

February 4, 2014

When compared with the numbers from the previous year, 2013 has seen an increase in reported security vulnerabilities and, what’s more, the number of critical …