Without words, the security company FireEye has just discovered another flaw in java just days after the previous ones ... YAJ0: YET ANOTHER JAVA ZERO-DAY
Lately, thank you or unfortunately .. But because of Java. Several large companies and social networks have fallen ...
Among them are: The "sophisticated" successful attack on Facebook. And even Twitter (exposing more than 250.000 accounts on the social network).
Apple Computers has also reported being the victim of attacks using the same technique (infecting its employees with malware using a vulnerability in Java), further increasing the alert and raising the pressure on Oracle to fix this security problem as soon as possible.
On Wednesday, Oracle, the company responsible for Java since acquiring Sun Microsystems, finally released a patch to fix this critical vulnerability that allows an attacker to execute arbitrary code on any operating system simply by visiting a specially crafted or modified website.
The recommendation, then, is to apply this patch as soon as possible to all your systems to avoid security problems on your equipment, especially knowing that many eyes are on this vulnerability and sooner rather than later organized malware gangs will be using it to grow their business.
As we know that it will not be the last security flaw in JAVA, you may want to remove it from your browser, keeping its functions on your computer, for this you can perform the following steps depending on the browser you use:
- Internet Explorer: If you have UAC enabled, deactivate it and restart then open the Control Panel and click on the Java icon, you go to the tab that says Advanced and in the option of "java for browsers", stand on top of "Microsoft Internet Explorer" and press space, then click OK and that's it.
- Mozilla Firefox Enter the "components" option, look for everything that is related to java and click on "Disable" in everything that Java says.
- Safari: Enter safari preferences, then the "security" option and deactivate the option that says "Allow Java".
- Chrome: open the plugins from the menu (or by typing chrome: // plugins / in the bar) in the list that appears, look for the java plugins and click on "Disable".
- Opera: In the address bar you write opera: plugins and in the list that appears, click on disable everything that says java.
The origin of these attacks is still unknown, and although several media outlets accuse China of being the source , there is still not enough evidence to confirm this.
Taken from: DragonJAr