Java

The pervasive risk of vulnerable open source components

October 18, 2017

Veracode announced findings from the 2017 State of Software Security Report, a comprehensive review of application security testing data from scans conducted by a base of more …

Oracle fixes Solaris 10 flaw targeted by leaked NSA exploit

April 19, 2017

Oracle has pushed out a record-breaking 299 fixes for vulnerabilities in its many, many products, and among them is a Solaris 10 bug whose existence has been revealed through …

Java and Flash top list of most outdated programs on users’ PCs

March 23, 2017

52% of the most popular PC applications, including Flash and Java, are out-of-date. People are exposing their PC and their personal data to risks, as malware targets older …

Post-pumpkin Patch Tuesday: What’s in store for November

November 3, 2016

There has been a lot of activity since October’s Patch Tuesday. During that short period of time, Oracle released its quarterly CPU, including an update for Java JRE; Adobe …

How developers fight the rise in web application attacks

May 19, 2016

Recent reports highlight the challenge faced by developers in securing code as attacks against web applications increase, while security budgets for developers remain low, …

Oracle patches 136 flaws in 49 products

April 20, 2016

Oracle released the April 2016 Critical Patch Update, which provides fixes for 136 vulnerabilities in 49 products, including Java SE and MySQL, the company’s Database …

Researchers release PoC exploit for broken IBM Java patch

April 6, 2016

Polish firm Security Explorations has had enough of broken patches for security vulnerabilities it has reported to vendors. On Monday, the company’s CEO Adam Gowdiak has …

Emergency Java update plugs system compromise hole

March 24, 2016

Oracle has issued an emergency security update for Java to plug a critical flaw (CVE-2016-0636) that could be exploited by luring users to visit a web page hosting the …

Kotlin programming language for JVM and Android reaches version 1.0

February 16, 2016

Kotlin is an open source programming language for JVM and Android that combines OO and functional features and is focused on interoperability, safety, clarity and tooling …

Oracle pushes out emergency fix for Java SE

February 9, 2016

Oracle has patched a vulnerability (CVE-2016-0603) in Java SE (Standard Edition) 6, 7 or 8 on the Windows platform, which could be exploited by attackers looking for ways to …

Oracle announces Java plugin deprecation, death

January 28, 2016

With a short post by a member of the Java strategy team, Oracle has announced the approaching death of the hated Java plugin. “Oracle plans to deprecate the Java browser …

Oracle agrees to settle FTC charges it deceived consumers about Java updates

December 22, 2015

Oracle has agreed to settle Federal Trade Commission charges that it deceived consumers about the security provided by updates to its Java Platform, Standard Edition software …