Oracle

Oracle plugs a host of critical Java vulnerabilities

April 17, 2013

Oracle’s Java SE Critical Patch Update for April 2013 contains 19 CVEs with CVSS base score of 10 (the highest you can go) indicating that exploiting the vulnerability …

Security firm publishes details about Java issue, asks for second opinion

March 19, 2013

Making good on their promise, Security Exploration has published technical details about a Java issue that they consider to be a security vulnerability, but Oracle has …

MiniDuke does not come only via email

March 11, 2013

Researchers from Kaspersky and CrySyS Lab continue to analyze the MiniDuke backdoor and have discovered two previously unknown infection mechanisms. Recently discovered to …

Malicious Java applet uses stolen certificate to run automatically

March 6, 2013

A signed but malicious applet that will apparently fool even the latest Java 6 update has been discovered on a German online dictionary website infected by the g01pack exploit …

Oracle releases emergency patch to fix exploited Java flaw

March 5, 2013

Oracle has released an out-of-band Java patch to fix the CVE-2013-1493 vulnerability that is currently being exploited in attacks in the wild. The security alert accompanying …

Dangerous beans: Oracle deep in the storm

March 5, 2013

Last week security researchers from FireEye discovered a new Java exploit that works against the latest versions of Java (version 6 update 41 and version 7 updated 15) making …

Oracle, Apple release critical updates for Java

February 20, 2013

Oracle has released on Tuesday a new Java SE Critical Patch Update. “This Critical Patch Update includes all fixes provided in the Oracle Java SE Critical Patch Update …

Oracle releases MySQL 5.6

February 5, 2013

Oracle today announced MySQL 5.6, the world’s most popular open source database. With increased performance, scalability, reliability and manageability, MySQL 5.6 helps …

Oracle rushes out emergency Java patch

February 4, 2013

If you’re still among the users who haven’t disabled Java in their browsers or on their computer, be advised that Oracle has released a critical patch update for …

Watering hole campaign targeting “Reporters without Borders” visitors

January 24, 2013

Watering hole attacks continue unabated and, according to Avast’s Director of Threat Intelligence Jindrich Kubec, the finger could be safely pointed to China once again. …

Newest Java update doesn’t fix fresh critical vulnerabilities

January 21, 2013

Another week, another zero-day threatening millions of Java users. As you might remember, last week Oracle released Java 7 Update 11, which patched the zero-day vulnerability …

Oracle delivers 86 security fixes

January 16, 2013

Oracle has had two major updates in the last 2 days. On Sunday, Jan. 13 a new version of Java 7 was released that addresses the 0-day vulnerability that has been exploited in …