Critical Update Plugs 40 Security Holes in Java

Summary: Oracle released a critical patch update for Java fixing at least 40 security vulnerabilities, bringing Java 7 to Update 25 on Mac and Windows. Oracle's advisory states that 37 of the 40 flaws may be remotely exploitable without authentication, and the update also ends public updates for Java 6.
Why it matters: Thirty-seven of the 40 holes can be exploited over a network with no username or password, and the article notes Java is a top target of malware writers and miscreants while many enterprises remain stuck on Java 6 for legacy and custom applications.

Read the original at Krebs on Security ↗

Topics: Data Breaches
Related: TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026
Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026
City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026