Java Patch Targets Latest Attacks
Summary: Oracle released Java 6 Update 20, which removes a feature hackers had been using to install malware, though Oracle's documentation of the security fixes is described as opaque. A popular song lyrics website was compromised on Wednesday and seeded with code that leveraged this Java feature to plant malicious software.
Why it matters: The same week, M86 Security spotted a ZeuS Trojan spam campaign abusing the "launch action" feature in Foxit Reader and Adobe Reader, so two widely installed programs were being used as malware delivery vehicles at once.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026