{"id":3575,"date":"2011-12-02T13:39:22","date_gmt":"2011-12-02T12:39:22","guid":{"rendered":"http:\/\/blog.intego.com\/?p=3575"},"modified":"2011-12-02T13:39:22","modified_gmt":"2011-12-02T12:39:22","slug":"have-you-updated-java-yet-if-not-youd-better-hurry","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/have-you-updated-java-yet-if-not-youd-better-hurry\/","title":{"rendered":"Have You Updated Java Yet? If Not, You’d Better Hurry"},"content":{"rendered":"

Brian Krebs has published an article about a Java exploit that is being used in the wild<\/a>. As part of the Metasploit framework – a hacking tool – this Java attack “has been tested to successfully deliver payloads on a variety of platforms, including the latest Windows, Mac and Linux systems.”<\/p>\n

As the Metaslpoit blog points out<\/a>, “This vulnerability is particularly pernicious, as it is cross-platform, unpatched on some systems, and is an easy-to-exploit client-side that does little to make the user aware they’re being exploited.”<\/p>\n

Intego’s senior malware researcher told me that, “this threat is completely invisible, and anyone can get infected by visiting a malicious web site.” If you visit a web site, it might be infected, you may be redirected to another site, or there may be content on a web page that comes from another site… In other words, even seemingly safe sites may be infected by hackers who then take advantage of this exploit to infect Macs.<\/p>\n

In other words, if you haven’t updated Java – we alerted you to the latest Java update<\/a> four weeks ago – you’d better do so now. Launch Software Update and get the latest Java update.<\/p>\n","protected":false},"excerpt":{"rendered":"

Brian Krebs has published an article about a Java exploit that is being used in the wild. As part of the Metasploit framework – a hacking tool – this Java attack “has been tested to successfully deliver payloads on a variety of platforms, including the latest Windows, Mac and Linux systems.” As the Metaslpoit blog […]<\/p>\n","protected":false},"author":3,"featured_media":3494,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[75,144],"class_list":["post-3575","post","type-post","status-publish","format-standard","has-post-thumbnail","category-security-news","tag-java","tag-vulnerability"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t