Cyber Risks · Krebs on Security

What You Need to Know About the Java Exploit

Summary: Attackers were exploiting a previously undocumented security hole in Java 7 that can seize control of a computer when a user visits a compromised or malicious Web site, and Oracle released a patch on Jan. 13. Java runs on more than 850 million personal computers worldwide, and CERT advised that unplugging the Java browser plugin essentially prevents exploitation of the vulnerability.

What you should know: The flaw is mainly spread through exploit packs stitched into legitimate hacked sites as well as porn sites, so all it takes is one line of code on a site you already trust; the Flashback worm used a Java flaw to infect more than 600,000 Macs.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related