Java flaw draws Web attacks...

[Shinma]

Java flaw draws Web attacks, reports say

A vulnerability in the Java software has the potential to affect a wide swath of computer users, and researchers warn that it's already being exploited "in the wild."

Security researchers have spotted a new vulnerability in the widely used Java software that could give attackers access to your computer.

The US-CERT group today issued an alert saying that Java 7 Update 10 and earlier versions of the software contain an unspecified vulnerability that can allow a remote, unauthenticated attacker to execute arbitrary code. The attack can be induced if someone visits a Web site that's been set up with malicious code to take advantage of the hole.

This weak spot is already being attacked "in the wild" -- that is, it's a real-world threat -- and is being incorporated into exploit kits that make it easier for those with ill intentions to create an attack...

For full story,
Click HERE

Luckily, I rarely use Java anymore...

[SpywareDr]

How to uninstall Java

[SpywareDr]

Another Java zero-day exploit in the wild actively attacking targets

Latest attacks used to surreptitiously install McRat trojan on victim machines.
by Dan Goodin - Mar 1 2013, 11:10am EST

Hackers are exploiting a previously unknown and currently unpatched vulnerability in the latest version of Java to surreptitiously infect targets with malware, security researchers said Thursday night.

The critical vulnerability is being exploited to install a remote-access trojan dubbed McRat, researchers from security firm FireEye warned. The attacks work against Java versions 1.6 Update 41 and 1.7 Update 15, which are the latest available releases of the widely used software. The attack is triggered when people with a vulnerable version of the Java browser plugin visit a website that has been booby-trapped with attack code. FireEye researchers Darien Kindlund and Yichong Lin said the exploit is being used against "multiple customers" and that they have "observed successful exploitation."

The security of Java is reaching near-crisis levels as reports of new in-the-wild exploits have become an almost weekly occurrence over the past few months.

[...continues...]

[DanceMan]

Damn. OOo or Llibre Office use Java and I just installed LO in one laptop. I otherwise have no need of Java.

[Huge]

How to uninstall Java

+1

[Midknyte]

You can run Libreoffice without Java. Certain things won't work, but it's not absolutely required.

http://ask.libreoffice.org/en/questi...-require-java/
https://wiki.documentfoundation.org/Development/Java

[DanceMan]

The Java flaw appears to involve a browser plugin. I assume I needn't worry that much about it in the office apps. But I guess I should search it and update it.