Java: A Gift to Exploit Pack Makers
Summary: Krebs on Security reported that Java vulnerabilities had become the top moneymaker for exploit kit authors, with the Blackhole kit finding a working exploit about 10 percent of the time and Java flaws comprising more than 90 percent of its successful exploits. Three working installations of SEO Sploit Pack showed Java accounting for between 50 and 65 percent of malware installs, and Krebs noted Java flaws were also the leading exploit vector for the Crimepack and Eleonore packs.
What you should know: Java was installed on roughly 85 percent of the world's desktop computers, and many users did not know it was there or that it needed frequent patching - while Oracle's default updater checked only on the 14th of each month, and the October 2010 update alone fixed 29 security flaws.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026