Unpatched Java Exploit Spotted In-the-Wild
Summary: Google researcher Tavis Ormandy disclosed on April 9 that a Java feature present since Java 6 Update 10 could launch arbitrary applications on Windows PCs from a crafted website. Security experts then found songlyrics.com, a site Compete.com says gets about 1.7 million visits monthly, loading code from a Russian domain that redirected visitors to an exploit kit, with AVG's Roger Thompson saying it used Ormandy's proof-of-concept code.
Bottom line: A mainstream lyrics site with roughly 1.7 million monthly visits was enough to seed the exploit, and the malicious domain's name servers also hosted spyeraser-security.com, spyeraser-trial.com and spyeraser-software.com - the delivery infrastructure was already in place before defenders had a patch.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026