Unpatched Java Vulnerabil​ity Exploited In Targeted Attacks, Aug. 2012-Jan.2​013

Question

A Java vulnerability that has yet to be patched is being actively exploited by cybercriminals.
August 27, 2012, 12:41 PM — Attackers are exploiting a new and unpatched vulnerability that affects the latest version of Java -- Java 7 Update 6 -- in order to infect computers with malware, according to researchers from security vendor FireEye.
So far, the vulnerability has been exploited in limited targeted attacks, FireEye's senior staff scientist Atif Mushtaq said Sunday in a blog post. "Most of the recent Java run-time environments i.e., JRE 1.7x are vulnerable."
Article continued:
http://www.itworld.com/security/291781/unpatched-j​ava-vulnerability-exploited-targeted-attacks-resea​...
ThinkPad: T530 / X1 Gen 2 / Helix - Yoga: Tablet 2 Pro (Win) / Yoga 3 Pro
If you find a post helpful and it answers your question, please click the "Accept As Solution" button.
Lenovo Advocate ~ I am not employed by Lenovo or Microsoft. I am a volunteer.
Microsoft MVP - Consumer Security
SpywareHammer

Answer 1

Fortunately, my new ThinkPad did not have Java installed on it when it arrived (kudos to Lenovo!).
For the rest of you, this info comes via Brian Krebs:
Is your Java exploitable? Go here and find out: http://www.isjavaexploitable.com/
If yes, go here to disable it: http://krebsonsecurity.com/how-to-unplug-java-from​-the-browser/
ThinkPad: T530 / X1 Gen 2 / Helix - Yoga: Tablet 2 Pro (Win) / Yoga 3 Pro
If you find a post helpful and it answers your question, please click the "Accept As Solution" button.
Lenovo Advocate ~ I am not employed by Lenovo or Microsoft. I am a volunteer.
Microsoft MVP - Consumer Security
SpywareHammer