Millions of computer users who run the most recent versions of Oracle's Java software should disable it owing to security flaws, says the cybersecurity section of the Department of Homeland Security.