New security vulnerability found in Java; experts recommend disabling the app

new vulnerability found in java experts recommend disabling the app coffee cup

Researchers have identified a zero-day security flaw in the Java program that hackers are exploiting. The concern is severe enough that the U.S. Computing Readiness Team, a unit of the Department of Homeland Security’s National Cyber Security Division, issued a note about the flaw. The vulnerability has already been incorporated into two of the most popular Web threat tools for hackers’ malware distribution, so the threat is live and putting computers at risk, The Next Web reported. 

The problem is a remote code execution vulnerability in Java 7 Update 10 and earlier versions of the application. This weakness allows a hacker to execute arbitrary code on an exposed machine. The Computing Readiness Team said there is no known workaround yet to protect against malicious attacks, and they recommended disabling Java if at all possible until maker Oracle can enact some repairs. If you can’t disable or uninstall the application, your best bet is to disable it in your main browser and keep all of your Java use confined to a separate browser.  

A French researcher working under the name Kafeine first reported the vulnerability, and security company AlienVault Labs confirmed the flaw. Kafeine said in his post about the problem that the latest version of Java was being exploited on a site receiving a heavy volume of traffic. 

Java has been a source of security concerns for years. Java 7 Update 7 was an out-of-cycle patch released in September to block a vulnerability that let hackers assume total control over a computer. The software is near-ubiquitous, making it an appealing target for hackers. Check out our explainer on Java for more information, including a walkthrough of how to disable and uninstall the app on your computer. 

Image via Jennie Faber

Computing

Customer data is compromised as hackers crack Newegg’s security

Online electronics retailer Newegg has found themselves at the heart of an online security breach as the company's payment system was breached, giving hackers of the notorious group, Magecart, potential access to confidential customer data…
Computing

Windows handwriting-recognition tool may pose security risk

A Windows file that is designed to help improve the platform's ability to translate your handwritten notes into readable text may be a security concern. One researcher found it contained passwords and email contents.
Social Media

Facebook is paying cash rewards if you find vulnerabilities in third-party apps

As part of efforts to put the Cambridge Analytica scandal and related issues behind it, Facebook said this week it's expanding its bug bounty program to include third-party apps and websites that could potentially misuse its data.
Computing

Security flaw on modern PCs could leave your encrypted data exposed

Hackers can revive the decade-old cold boot attack to steal your data by exploiting weaknesses in a modern PC's or Mac's firmware, researchers discovered. The hack requires attackers to have physical access to your PC.
Computing

Nvidia GeForce RTX 2080 vs. RTX 2080 Ti

Nvidia's RTX 2080 Ti is a beast of a graphics card, packing in RT, Tensor, and CUDA cores to enhance your gaming experience. We'll compare the Ti variant to the standard RTX 2080, and we'll let you know which card to buy.
Computing

Nvidia GeForce RTX 2080 vs. GTX 1080

Should you upgrade from your GeForce GTX 1080 to the GeForce RTX 2080? Even if you won't take advantage of ray tracing, there are other benefits to the RTX series. We'll examine how each GPU performs to help you decide.
Computing

We tested Nvidia’s RTX 2080 and 2080 Ti. Are they a worthy upgrade?

We finally have Nvidia's newest graphics cards, the RTX 2080 and 2080 Ti, and put them through our standard suite of benchmarks and game tests to see how they performed in a standard play of Battlefield 1 and Fornite. How do they compare to…
Photography

Not just for photographers anymore, Loupedeck+ now supports Adobe Premiere Pro

Video editors can now get physical with the Loupedeck+ control board. Originally for Lightroom, a software update allows the controls to adapt to video editing, including color grading, clip trimming, and navigating through the timeline.
Computing

PowerDirector, PhotoDirector aim to balance advanced tools with easy editing

CyberLink's latest photo- and video-editing programs fix advanced tools with a simple UI. PowerDirector adds Chroma-Key tools and multicam features, while PhotoDirector gains tethered shooting, an updated layer, and Content-Aware tools.
Computing

Here are all the games that support Nvidia’s RTX ray tracing

These are the upcoming games that support ray tracing rendered on Nvidia's RTX series graphics cards. They aren't many in number at this point, but thanks to the power of ray tracing, they are some of the best looking games ever made.
Computing

Nvidia's new GPUs are all about ray tracing. Here's why that matters

Nvidia's new GTX 2000 series graphics cards bring Ray Tracing technology to modern real-time 3D graphics, including games, for the first time. But what is ray tracing, and what does it mean for your games?
Emerging Tech

Giant wind farm in Morocco will help mine cryptocurrency, conserve energy

One of the windiest parts of Morocco is set to get a $2 billion wind farm power plant, which could help power eco-friendly cryptocurrency mining in a more environmentally friendly way.
Computing

AT&T’s new 5G network could adopt tiered billing, including a gaming plan

AT&T may be leveraging its 5G's fast speeds and low latency in order to create a special plan for gamers. AT&T didn't disclose what the 5G gaming plan will cost, but gamers could be free from Wi-Fi in the future.
Computing

Nvidia's new RTX GPUs have arrived. Here's what you need to know about them

Nvidia's new RTX 2000 series graphics cards are impressive pieces of hardware, with some amazing advancements and some rather high price tags to match. Here's everything you need to know about Nvidia's new top-tier cards.