Security News

Custom Google App Engine Tweak Still Leads to Java Sandbox Escapes (Threatpost)

2015-10-22 13:06

Researchers at Security Explorations say a change implemented by Google to the Java security model as its implemented in the Google App Engine leads to sandbox escapes.

#google #java #sandbox #threatpost

How The Pawn Storm Zero-Day Evaded Java's Click-to-Play Protection (Reddit)

2015-10-21 20:35

#zeroday #reddit #java

Oracle Patches Java Zero-Day Exploited by Pawn Storm Attackers (SecurityWeek)

2015-10-21 11:35

#oracle #securityweek #zeroday #java

Older Java sandbox escape writeup (Reddit)

2015-10-21 11:35

#reddit #sandbox #java

Oracle releases 154 fixes, plugs click-to-play bypass Java flaw used in attacks (Help Net Security)

2015-10-21 11:33

Oracle has released its quarterly patch update that contains 154 security fixes for its various products. What will interest end users the most are the fixes released for Java, a plugin often targe...

#attack #bypass #java #oracle #security