fbpx

Department of Homeland Security Issues Warning To Computer Users

By Art Gallagher

If you’ve been surfing the net over the last few days,  you are very likely at risk for identity theft.  Your networks could be at risk. 

The U.S. Department of Homeland Security has announced that hackers have discovered and are exploiting a flaw in Java security that could allow the installation of malicious software and malware on your computer.

DHS is recommending that computer users disable or uninstall Java until further notice.

Most anti-virus, firewall and malware detection programs are not preventing this vulnerability from being exploited.

For instructions on disabling or uninstalling Java click here.

This is a serious problem that has not yet been widely reported in the media.

For more detailed information, read this article by Brian Krebs at KrebsOnSecurity.com

UPDATED: Computer Experts Recommend Disabling Java Unless You Know You Need It

Posted: January 13th, 2013 | Author: | Filed under: Computer Security, Department of Homland Security | Tags: , , , , , , , , , , , , , , | 9 Comments »

9 Comments on “Department of Homeland Security Issues Warning To Computer Users”

  1. TheDigger said at 7:34 pm on January 13th, 2013:

    did it two days ago….disable all java in your browsers!

  2. Art Gallagher said at 9:31 pm on January 13th, 2013:

    To the anonymous naysayers who purport to be experts:

    Use your real name and a verifiable email address. Otherwise, your “contributions” are unwelcome on this post.

  3. Middletowner said at 11:04 pm on January 13th, 2013:

    Same Government that knows how much coke you can drink, and how much water you should flush in the toilet, they’re now also antivirus experts?

  4. JavaMan said at 12:50 am on January 14th, 2013:

    There’s also a Java update available that fixes the vulnerability:
    http://www.java.com/en/download/manual.jsp

  5. MoreMonmouthMusings » Blog Archive » Computer Security Experts: Disable Java Unless You Know You Need It said at 8:15 am on January 14th, 2013:

    […] released a fix to the Java vulnerability we reported last night.     The company said another update is due out “soon.”  You can access the fix […]

  6. Safety First said at 4:38 pm on January 14th, 2013:

    The jury is still out, regarding the effectiveness of Oracle’s newly released emergency patch.

    As I stated in the comment section of More Monmouth Musing’s follow-up article, “…Java is the gift that just keeps on giving.”

  7. Safety First, UPDATE said at 5:24 pm on January 14th, 2013:

    Homeland Security warns Java still poses risks after emergency security fix:

    Apparently, Homeland Security (US-CERT) doesn’t feel it’s safe to go back into the water yet.

    The revised DHS warning, including statement on the Java emergency patch:

    http://www.kb.cert.org/vuls/id/625617

    “Solution:
    Update to Java 7u11”

    “Oracle Security Alert CVE-2013-0422 states that Java 7 Update 11 addresses this (CVE-2013-0422) and an equally severe vulnerability (CVE-2012-3174). Immunity has indicated that only the reflection vulnerability has been fixed. Java 7u11 sets the default Java security settings to “High” so that users will be prompted before running unsigned or self-signed Java applets.”

    “Unless it is absolutely necessary to run Java in web browsers, disable it as described below, even after updating to 7u11. This will help mitigate other Java vulnerabilities that may be discovered in the future.”

    Also see http://www.zdnet.com/homeland-security-warns-java-still-poses-risks-after-security-fix-7000009785/

  8. 130201 | The Hyper Report said at 5:46 am on February 1st, 2013:

    […] are referring to is one drawn on paper for rock, paper, and scissors. 2. If you serf the internet, you are at risk for identity theft. 3. Avoid using the words like cloud, flu, pork, or water on the internet. Don’t you just feel […]

  9. 130201 – Rush For Safety » The Original N-D-N's Blog said at 8:56 am on February 1st, 2013:

    […] are referring to is one drawn on paper for rock, paper, and scissors. 2. If you serf the internet, you are at risk for identity theft. 3. Avoid using the words like cloud, flu, pork, or water on the internet. Don’t you just feel […]