NY.gov Portal State Agency Listing

Cyber Security Tips

Volume 8, Issue 8

Java Exploits - pdf

Newsletter for branding

From the Desk of Thomas D. Smith, Director

What is Java?

Java is a computer language that allows programmers and application developers to write software that can run on many different operating systems. Numerous applications and websites require end-users to have Java installed. Websites incorporate Java applets (small applications) to enhance the usability and functionality of a website. In general, when a user visits one of these websites, depending on their browser's security settings, they may have no idea the Java applet is automatically running.


What are the Risks with Java?

Java is designed to work on almost any computer. Java has been prone to numerous reports of vulnerabilities. According to the SecureList IT Threat Evolution Report released by Kaspersky Lab in May 2013, "The most widespread vulnerabilities are found in Java and [the vulnerabilities] were detected on 45% of all computers." 1


How Can I Mitigate Java Exploits?

  • Set the Java security level to "High" or "Very High." The most recent versions of Java have the ability to manage when and how untrusted Java applications/applets will run. You can set the security level from within the Java Control Panel so that you are notified before any untrusted Java applications run. Visit: http://www.java.com/en/download/help/jcp_security.xml for instructions on setting the Java security level.
  • Do not allow applications from unknown publishers to run.


For More Information:

What is Java?

Java Security Resources

Uninstalling Java on Windows

Uninstalling Java on Mac

Disabling Your Browser's Java Plugin


For more monthly cyber security newsletter tips, visit:

