Oracle Pushes Java Fix: Patch It or Pitch It
Summary: Oracle released an update for Java fixing at least eight critical security holes, seven of which may be remotely exploitable without authentication, with the fixes shipping in Java 8 Update 71. Krebs advises users with a specific need for Java to update, and those unsure why they have it installed to remove the program, noting Java is a top target of malware writers.
What's compelling: Seven of the eight flaws can be exploited over a network without a username or password, so an unpatched Java install is reachable by malware with no credential barrier at all.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026