Microsoft: ‘Unprecedented Wave of Java Exploitation’
Summary: Microsoft warned in October 2010 of an "unprecedented wave of Java exploitation," with attacks against three already-patched Java vulnerabilities rising from hundreds of thousands per quarter to millions in the third quarter of 2010. Microsoft's Holly Stewart said Java exploits had overtaken Adobe-related exploits as attackers' preferred way into Windows PCs, and exploits for a Java flaw pushed the Renos Trojan to the top of all malware families detected in the United States.
Bottom line: Java was installed on roughly 85 percent of PCs, yet many users did not know it was there or that it needed updating, and the attacks were against flaws that had already been patched. Oracle's Java 6 Update 22 fixed at least 29 security flaws, but the built-in updater checked only on the 14th of each month by default and often failed to detect new versions.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026