On Sunday, Oracle rushed out a fix for a critical bug in Java that had been folded into exploit kits, crimeware made to automate the exploitation of computers via Web browser vulnerabilities.

Another previously unpublicized flaw in Java threatens the security of millions of PCs that may still have the application running on it.

Researchers at Seculert have linked a nearly two-year-old Java exploit to the Red October espionage malware campaign uncovered by Kaspersky Lab this week. Red October uses a variety of malware and ...

A new exploit for a previously unknown and unpatched Java vulnerability is being actively used by attackers to infect computers with malware, according to researchers from security firm FireEye.

If your computer is running Java and you have not updated to the latest version, you may be asking for trouble: A powerful exploit that takes advantage of a newly-disclosed security hole in Java ...

Java the Hutt meets CVE-2012-1723: the Evil Empire strikes back The Java exploit for CVE-2012-1723 is already included in the latest update of the BlackHole exploit kit.

A new vulnerability was found last week in the latest Java 7 runtime from Oracle. The vulnerability is currently being used by malware developers to exploit systems with runtime installed. Similar ...

A security researcher finds that seven exploit kits have added an attack for a previously unreported flaw in the latest version of the Java Runtime Environment.

Already the hacker's tool of choice, BlackHole exploitation rates have soared from a success rate of one in 10 to just one in four, due to the inclusion of a recent Java zero day.

A researcher says a newly released exploit for a Java vulnerability patched in June was added to the Styx exploit toolkit.

A new exploit for a recently fixed vulnerability in Java has been added to the Metasploit penetration testing framework, according to vulnerability management firm Rapid7, which owns the open ...