Researchers have discovered a new vulnerability in the Java Reflection API that can be exploited by a decade-old attack. No Java component has had a bigger bull’s eye on its back this year than the ...

Oracle’s Critical Patch update addresses 154 vulnerabilities, many of which are remotely exploitable. Security Explorations of Poland, meanwhile, published details on a number of Java flaws in the ...

OpenJDK project teams will focus work on features such as value types, code reflection, AOT compilation, and structured ...

Java is starting to look like a chubby guy in tight Dockers who can't sit down without splitting a seam (and yes, I analogize from experience). A week after Oracle released Java 7, Update 21, which ...

After news broke on Thursday that a new Java 0-day vulnerability had been discovered, and was already being included in multiple popular exploit kits, two new important tidbits have come in on Friday.

Oh no, not again: Barely a week after Oracle rolled out its latest security update for Java, a researcher has found yet another security hole in the software. Researcher Adam Gowdiak said the new flaw ...

You can't blame Mark Reinhold, chief architect of the Java Platform Group at Oracle, for showing a bit of frustration with Java developers who insist on calling methods that have been deprecated for ...