Security & Hacking: Java exploit Number ∞

http://nakedsecurity.sophos.com/2013/01/20/java-hacker-boasts-of-finding-two-more-unpatched-holes/

http://krebsonsecurity.com/2013/01/new-java-exploit-fetches-5000-per-buyer/

Seems like you can find new/more Java exploits a lot faster than they can be patched, so if your concerned about security, stop using Java on Browsers!

Course, if you want to make sure Blackhat Hackers don't starve, keep using it, </sarcasm>

PSA | Security & Hacking: Java Patch has critcal bug(s?)

See Ars link for full details http://arstechnica.com/security/2012/08/critical-bug-discovered-in-newest-java/

In case you missed it, this patch was out of cycle on released yesterday to deal with this Zero Day Java Exploit 

At this point I am joining lot of other people in recommending disabling Java from all the browsers you use.

AFAIK using Java on your computer, but not with Browser, like to play Minecraft should be okay, I have heard had more than one computer professional say that.

If there are online services that you need to use for work, or whatever, that require Java in Browser you can do several things:

1. Ask that company if they have any Java alternatives, or if they are working on alternatives because of the Security risks of Java.
2. Use a second browser only for the sites that you have to use Java for, make sure you keep it patched (most of the mainstream browsers now disable Java if you don't have current version installed)!
3. Disable Java on your browser and only turn it on when needed, then turn it off again.

See Also:

• http://krebsonsecurity.com/2012/08/java-exploit-leveraged-two-flaws/
• http://krebsonsecurity.com/2012/08/security-fix-for-critical-java-flaw-released/
• http://nakedsecurity.sophos.com/2012/08/30/oracle-releases-out-of-cycle-fixes-for-java/ 
• For more of my Blog Posts similar to this one, click on one of these labels:  Security, Hacking, Password Cracking, or Pen Testing.

Security & Hacking: Zero Day Exploit Java

Original report (AFAIK) http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html

It is strongly suggested to disable Java till a patch is available.

Other articles on it:

• Ars (~General Audience) http://arstechnica.com/security/2012/08/critical-flaw-under-active-attack-prompts-calls-to-disable-java/
• Erratica Security (~Coder/Computer Nerd level) http://erratasec.blogspot.com/2012/08/new-java-0day.html
• Krebs (update) http://krebsonsecurity.com/2012/08/attackers-pounce-on-zero-day-java-exploit/

Edited to add:

Windows users  guide for disabling Java http://antivirus.about.com/od/securitytips/ht/How-To-Disable-Java-In-Internet-Explorer.htm

Mac users guide to disable Java in Chrome, Firefox, & Safari http://www.maclife.com/article/howtos/how_disable_java_your_mac_web_browser

For Chrome cut and paste about:plugins into the url bar, I couldn't figure out any other way to get there, there probably is but this is easy.

If you have any problems check both links in this section, the browsers work pretty much the same on Windows or Mac.

Or post question in comments and I will try to help.

Starcraft 2 Siege Tank Exploit or Bug to be aware of

Thanks to Husky for the heads up.