Beware any Java security update that you don't download directly from Oracle's website. The malware may be encountered when visiting websites that have been compromised with a crimeware toolkit and ...

Oracle announced enhancements to Java security around signed applets and certificate validation, but experts such as HD Moore want to see more work done to beef up the Java sandbox. Oracle is working ...