Posted: 1/11/2013 8:19:36 AM EDT
|
We have been made aware of a serious exploit in Java that is currently being used to install malicious software on PC workstations.
This vulnerability affects all versions of Java, even the latest update, Java 7 Update 10. As a Common Focus customer all your workstations, except those designated as needing older versions, have Java updated twice a day. Therefore once a patch is released all powered on workstations will have the update in less than 12 hours. We ask you to take this exploit serious and let us know if you are experiencing any unusual issues with your computer. Even some national and local news channels have picked up on the major exploit and are covering the story. SO WHAT CAN YOU DO? You currently have two options, as current anti-virus definitions are not able to detect the exploit yet. Option 1 The only way to avoid this vulnerability completely is to remove Java from all workstations, until a patch is released. We have not taken this step yet, as it could seriously impact your normal business day-to-day operations. If you would like us to remove Java you MUST RESPOND to this email and power on all workstations in your office. After receiving a response that you would like Java removed from your office we will issue a command to automatically uninstall all versions of Java. Once an update is released and is verified as secure, we will than automatically reinstall Java with the latest updates. Option 2 If you choose not to disable Java, please ask your employees to not go to any unknown websites, or those which display advertising. The exploit is being used on many popular websites, with the virus being encoded into an ad. Got that in an e-mail from our tech support guys...just so you know. |
|
You could also use a plugin like NoScript for Firefox which disables loading of Java applets (and similar executables) from loading or executing unless you approve.
I've also heard that the major browsers may or may have recently disabled Java by default so the user has to expressly turn Java on. |