 Your new post is loading...
Your new post is loading...
Scoop.it!
A new zero-day vulnerability in Java discovered on a Chinese web server being used in a targeted attack is being quickly adopted by online criminals. 
No comment yet.
Sign up to comment
Scoop.it!
If allowed to run, a malicious Java applet checks the user's operating system and delivers a payload customized for that platform, whether it's Windows, Mac OS X, or Linux.
Read more: http://www.securityweek.com/multi-platform-java-exploit-targets-macs-linux-windows
Scoop.it!
From
www
The same Java vulnerability used in the infamous Flashback malware is now being used as an attack vector for a single piece of malware that can infect both Windows and Mac OS X computers.
Security vendors have discovered a new piece of malware that attacks both PCs and Macs. It uses the same Java security vulnerability exploited by the Flashback malware that infected hundreds of thousands of Macs. While the attack vector is the same as in Flashback, this Java Applet checks which OS it is running on and downloads suitable malware for it.
Gust MEES: use my free courses to know how to stay secure, follow links below...
- http://gustmeesen.wordpress.com/2012/03/16/beginners-it-security-guide/
Via Gust MEES
|
Scoop.it!
There is a new vulnerability in Java 7 that is being used in targeted attacks. It works against INternet Explorer, Firefox and versions of Chrome running on Windows XP.
The massive installed base of Java makes this vulnerability a particularly serious one, as any Java zero day is, but the other factor in the mix is that Oracle uses a scheduled quarterly patch cycle, and the next one isn't until mid-October. Unless the company issues an emergency patch, which is does rarely, the vulnerability will be fair game for attackers for nearly two months.
Read more:
Scoop.it!
Apple may have appeared to have pulled off a coup in persuading Oracle to maintain Java for Mac but can Oracle be trusted to get it right?
The emergence of the Flashback Trojan - which exploited a vulnerability in Mac OS X's version of Java - earlier this year led to a lot of flak for both Oracle and Apple. The vulnerability was known about and fixed in the Windows and Linux versions of Java, but remained exposed in OS X for several more weeks.
===> The fact that Apple is ultimately responsible for maintaining Java on OS X saw Apple's ability to protect its users questioned. <===
Read more:
- http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security
|
