Java Patch May Be Just a Finger in the Dam
Oracle
acted swiftly last week to close a zero-day vulnerability in its Java technology,
but given Java's track record, that patch is just one hit in a long game of
wackamole played with hackers.
A number of security companies
discovered the vulnerability over the weekend of Aug. 25. They noticed that a
popular and notorious root kit, Blackhole, was being upgraded by its malevolent
authors to exploit the Java flaw that hadn't appeared on the radar of malware
fighters before.
The vulnerability was so severe
that many security firms recommended turning off Java entirely.
Oracle quickly released an
out-of-cycle patch for the problem, a rarity by the company. "We've tested
the patch and it works," Chris Astacio, manager of security research at Websense told TechNewsWorld. "It doesn't
allow exploitation."
Attacks on Java are nothing
new, he noted. "Java has been the No. 1 vector of attack for exploit
kits," he said. "Your mass attacks are most of the time going to use
Java vulnerabilities to try and drop malware on client machines."
For that reason, some security
experts recommend turning off Java if you don't use it. "If you have no
purpose for Java, then absolutely remove it from your computer because there
have been multiple instances with Java where there have been zero days in the
past," Astacio explained.
modern arts
paintings gallery – http://www.myfirstsight.in/
this is very nice information
ReplyDelete