Oracle will retire the Java browser plug-in, frequently the target of Web-based exploits, about a year from now. Remnants, however, will likely linger long after that. “Oracle plans to deprecate the ...

More details are emerging regarding a QuickTime/Java security flaw affecting Mac OS X discovered by Dino Dai Zovi at the CanSecWest conference. A Secunia report on ...

A recent Java 7 update allows users to completely prevent Java applications from running inside browsers or to restrict how Web-based Java content is handled by the Java Runtime Environment (JRE) ...

For the last year or so, Java seems to have spawned a never-ending flow of security bugs, partly because of the software environment's invisibility to end users and partly because of the system access ...

Only 5 percent of actively used browser installations have the most up-to-date version of the Java plug-in, the vendor's data shows Most browser installations use outdated versions of the Java plug-in ...

Just in time for the new year, there's a new Java zero-day exploit out in the wild. Subscribe to read this story ad-free Get unlimited access to ad-free articles and exclusive content. It's already ...

Is the design of Oracle's Java 7 security sandbox backwards? That charge was leveled by programmer Jerry Jongerius, who last week released a Java Code Signing Failure alert detailing how Java security ...