The flaw targets fully patched installations of Java and, for now, users can only be protected by disabling the Java browser plug-in, according to Jaime Blasco, labs manager at San Mateo, Calif.-based ...

Malware used in a zero-day Java exploit was signed with certificates stolen from a security firm, researchers have found. The editions of Java targeted by the malware, Java 6 Update 41 and Java 7 ...

Researchers have uncovered yet another zero-day vulnerability in Java, and attackers are currently exploiting it in the wild. The security flaw, if triggered, leads to arbitrary memory read-and-write ...

Poland-based Security Explorations, which has been in a dispute with Oracle over the vendor's denial of a recent finding, said Monday that it discovered five additional flaws in Java SE. Two of the ...