News

Krebs on Security14y
Exploit Packs Run on Java Juice
The first, from an unusually elaborate exploit kit called “Dragon Pack ... functionality to ask the visitor to run a malicious Java applet. On Dec. 29, the SANS Internet Storm Center warned ...
InfoWorld12y
Java exploit used in Red October cyberespionage attacks, researchers say
The hundreds of government, military and research organizations targeted in a large-scale cyberespionage operation dubbed Red October were not only attacked using malicious Excel and Word ...
Ars Technica16y
Newly-found hybrid attack embeds Java applet in GIF file
The GIFAR exploit works because two different programs ... but when the "image" actually reaches the client, it's opened as a Java applet and run. Simply viewing a GIFAR won't infect a system ...
InfoWorld12y
Researchers warn of new Java exploit being used by attackers
The exploit reported by FireEye seems to target ... set your Java security settings to ‘High’ and do not execute any unknown Java applets outside of your organization.” ...
Macworld12y
Java security threats: What you need to know
The exploit for the first vulnerability was quickly ... is that Apple by default disabled Java applet support in Web browsers in its most recent Java security update. Starting with OS X 10.7 ...
PC World12y
Latest Java zero-day exploit is linked to Bit9 hacker attack
Security researchers from FireEye, who found the new Java attacks last week, said that the Java exploit installs a remote ... inserted a malicious Java applet onto those sites that used a ...
HotHardware12y
Java Exploit Used In Red October Malware Infections
Specifically, the exploit in question is CVE-2011-3544, which is present in Java 7 and 6 (update 27) and allows “remote untrusted Java Web Start applications and untrusted Java applets to affect ...
Computerworld12y
Rogue Microsoft Services Agreement emails lead to latest Java exploit
Hackers are distributing rogue email notifications about changes in Microsoft’s Services Agreement to trick people into visiting malicious pages that use a recently circulated Java exploit to ...
CNET12y
Do you need to uninstall Java to be safe from its vulnerabilities?
the plug-in is the avenue that malware developers use to exploit these remotely. You are somehow tricked into loading a Web page that contains a malicious Java applet, which exploits the fault and ...
Computerworld12y
Java zero-day exploit goes mainstream, 100+ sites serve malware
The exploit’s breakout followed the addition ... When a browser encounters a Java applet, OS X asks the user for permission to download the Oracle software. People running the older Snow Leopard ...
Krebs on Security14y
Exploit Packs Run on Java Juice
The first, from an unusually elaborate exploit kit called “Dragon Pack ... functionality to ask the visitor to run a malicious Java applet. On Dec. 29, the SANS Internet Storm Center warned ...