Yahoo! Pushing Java Version Released in 2008
Summary: Yahoo!'s free SiteBuilder tool, offered to users building sites in its hosting environment, bundled Java 6 Update 7, a version first released in summer 2008, while Oracle had just shipped Java 6 Update 39. Krebs reported that the bundled version carried hundreds of known critical vulnerabilities exploitable to remotely compromise host PCs, and Yahoo! later said it had switched SiteBuilder to Java 6 Update 39 with a move to Java 7 planned by month's end.
What you should know: The tool was aimed at small businesses, the users least likely to understand why Java needs updating and the most frequent targets of costly cyberheists, and Java was described as the biggest source of malware infections across exploit packs stitched into hacked and malicious websites.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026