Oracle's Java plugin for browsers is a notoriously insecure product. Over the past 18 months, the company has released 11 updates, six of them containing critical security fixes. With each update ...

Oracle’s Java is the culprit this time, with a security hole that could allow any malicious website to install software without the user’s knowledge.