Update Your Java!

Thanks for this, just came back from vaction. I would say I was back home at the right time

 

Dude read it ...
Because the RAT is consequently visiting his site, it's called a Java 0-day. It is basically undetectable, and is VERY widespread right now.

 

So is there anything to worry about if I haven't okay'd any java applets or whatever? Usually in the case of a drive-by you have to click yes on a prompt similar to the first time running RuneScape.

 

Thanks for the heads up. Safety first.

 

Am I good? Here's my Java Preferences and versions installed on a Mac.

 

You should be fine. If you want to be safe, I'd recommend downloading Malwarebytes and having a full scan done on your PC. Can't hurt to be safe!

You're as safe as possible - You have the most reason version/update so you should be fine

 

While I don't like to be the bearer of bad news, updating your Java won't do anything as the vulnerabilities were never actually patched, just the way to escape the sandbox. Unfortunately there are more than one ways to escape the java sandbox and inject shellcode, so I honestly would just turn java off when browsing unless you are about to play a java game you can trust.

 

Java 6 is secure, right?

 

Java 6 is secure from the 0day exploit, but is still vulnerable to other security risks. Meaning, the reason Java is updated, is not only to for efficiency updates, but for security and bug resolving updates. So they may be other security risks in V6, hence V7 was introduced. But, nothing of worry, in V6.

 

There was a very good answer, thanks.