Update: In the interest of quantifying the risk to the average Mac user from this exploit (which, please note, does not currently have a Mac-attack payload), I asked for some data from CrashPlan.

Java is at the center of yet another security storm after Polish security researchers found not one, but two new separate zero-day flaws in the Web plug-in software. Web users are once again warned to ...

Oracle will release a new version of Java on Tuesday that will include 42 security fixes and will make changes to how Web-based Java content will be presented inside browsers. Thirty-nine of the ...

The latest updates, Java 7 update 17 and Java 6 update 43, addressed CVE-2013-1493 and a related vulnerability (CVE-2013-0809), Oracle said in its security advisory released Monday. Both ...