Homeland Security warns to disable Java

Avatar for CMEvelyn
iVillage Member
Registered: 05-29-2012
Homeland Security warns to disable Java
3
Fri, 01-11-2013 - 1:01pm

From ZDdnetSummary: The U.S. Department of Homeland Security is the latest body to warn users to disable Java software amid escalating concerns over a serious, exploitable vulnerability.

The U.S. Department of Homeland Security has warned users to disable or uninstall Java software on their computers, amid continuing fears and an escalation in warnings from security experts that hundreds of millions of business and consumer users are vulnerable to a serious flaw.

Hackers have discovered a weakness in Java 7 security that could allow the installation of malicious software and malware on machines that could increase the chance of identity theft, or the unauthorized participation in a botnet that could bring down networks or be used to carry out denial-of-service attacks against Web sites.

"We are currently unaware of a practical solution to this problem," said the DHS' Computer Emergency Readiness Team (CERT) in a post on its Web site on Thursday evening. "This vulnerability is being attacked in the wild, and is reported to be incorporated into exploit kits. Exploit code for this vulnerability is also publicly available."

Java users should disable or uninstall Java immediately to mitigate any damage.

The latest flaw, as earlier reported by ZDNet, is currently being exploited in the wild, security experts have warned. Alienvault Labs have reproduced and verified claims that the new zero-day that exploits a vulnerability in Java 7, according to security expert Brian Krebs.

Avatar for CMEvelyn
iVillage Member
Registered: 05-29-2012
Fri, 01-11-2013 - 1:08pm

To disable Java in Opera, click on Tools>Advanced>Plug-ins, then scroll down and click on disable beside any Java plug-ins.

Avatar for CMEvelyn
iVillage Member
Registered: 05-29-2012
Wed, 01-16-2013 - 12:25pm

A patch was released on Monday. You should now update Java to version 7 Update 11. Make sure it is updated in your browsers as well as on your system.

You can check which version your browser is using here:

https://java.com/en/download/testjava.jsp

Avatar for CMEvelyn
iVillage Member
Registered: 05-29-2012
Thu, 01-24-2013 - 5:02pm

The folks at Windows Secrets say you should disable Java on all your browsers and leave it that way. They explain why and how you can do it, what effect it will have, and what to do if you need Java for some websites:

http://windowssecrets.com/top-story/security-alert-remove-java-from-your-browsers/