For several weeks security experts have warned that the Blackhole exploit toolkit was about to gain a weapon for attacking unpatched holes in Java.
That day has arrived. According to this report from Computerworld U.S. a number of sources have confirmed the exploit is part of Blackhole. Now Mozilla, which makes the Firefox browser, has warned users to disable Java for the time being. One firm said it has found more than 100 domains with the exploit.
One problem is that PC users don’t upgrade Java as often as they should — if they do at all. That’s a problem because Java is one of the first places hackers look to exploit. Related to that is the large number of computer users around the world who have no anti-malware defences on their machines.
Oracle Corp. took over control of Java when it bought Sun Microsystems in 2009.
Currently a freelance writer, I'm the former editor of ITWorldCanada.com and Computing Canada. An IT journalist since 1997, I've written for several of ITWC's sister publications including ITBusiness.ca and Computer Dealer News. Before that I was a staff reporter at the Calgary Herald and the Brampton (Ont.) Daily Times. I can be reached at hsolomon [@] soloreporter.com
ITWorldcanada.com is the leading Canadian online resource for IT professionals working in medium to large enterprises. IT World Canada creates daily news content, produces a daily newsletter and features IT professionals who blog on topics of industry interest.