Vulnerability in Java too. The 'real deal' arrives the day after the regular patch. Is an old version of Java lurking in your apps, too?

This week, it's PHP, Node.js, and JavaSecurity topics have been continuing this week. I've written about PHP and Node.js, and ...

Critical vulnerability 'CVE-2026-91403' in Java: The truth is the eMudhra certificate issue | Patched versions and what to do if you cannot update

There is a critical vulnerability in Oracle Java SE that allows for data theft and tampering. This news broke on the night of ...
Dark Reading

'Write Once, Pwn Anywhere': Less Than 1 Percent Of Enterprises Run Newest Version Of Java

Most everyone knows by now that Java is one of the most targeted applications on the endpoint. But new data shows that enterprises still harbor the most vulnerable and targeted version of Java -- the ...
NBC News

Despite Java update, security experts say bugs remain

Oracle Corp. released an emergency update to its Java software for surfing the Web on Sunday, but security experts said the update fails to protect PCs from attack by hackers intent on committing ...
InfoQ

Keeping Pace with Java

Marc Hoffmann attempts to answer what are the important aspects of the new Java release schedule and what a pragmatic and sustainable update strategy looks like. Marc Hoffmann is a Java Champion ...
Krebs on Security

Java Update: Patch It or Pitch It

Oracle today released a security update for its Java platform that addresses at least 20 vulnerabilities in the software. Collectively, the bugs fixed in this update earned Oracle’s “critical” rating, ...
Forbes

Time To Update Java - Or Disable It!

Earlier this week a new and very serious vulnerability was discovered by security researchers in the Java platform that is installed into millions computers worldwide. This left users running Java on ...