[Antigen]

I hope you all heard of Latest Java 0day Exploit,Got info on it.

Here is some news reports(Exploit hits the Web internationally,All versions of 7.xxx java is affected)

http://www.theregister.co.uk/2012/08/27/...k_exploit/
http://www.h-online.com/open/news/item/J...78618.html

Currently there is only one way to prevent infection by DISABLE JAVA right now,(Wait for Oracle releases a patch or update)
Update:Some AVs (Kaspersky,Sophos) is now prevent loading infected websites.
To Turn off Java in Mozilla

1. At the top of the Firefox window, click on the Firefox button (Tools menu in Windows XP), and then click Add-ons. The Add-ons Manager tab will open
   


2. In the Add-ons Manager tab, select the Plugins panel.
   


3. Click on the Java ™ Platform plugin to select it.
   


4. Click on the Disable button (if the button says Enable, Java is already disabled).
   

Java applets will no longer be permitted to launch in Firefox.

To Turn off Java in Chrome

1. To disable plug-ins, visit the Plug-ins page at chrome://plugins/. Find the plug-in that you’d like to disable and click Disable. You can also reenable disabled plug-ins on this page.
   

To Turn off Java in Safari

• In Safari, choose Safari > Preferences or press Command-comma (⌘-,)
  


• Click "Security".
  


• Uncheck (deselect) "Enable Java".
  


• Close the Safari preferences window.
  

For whitehats Here is the Exploit

[chillaxbro]

What can this do to me if im using a mac

[Antigen]

@NEZOS:Mac gets affected too,Dude Java is platform independent!!!(Want a proof see the news!!!)

[Super Effective]

What can this do to me if im using a mac

You are ignorant if you think viruses don't effect Mac's. There are and have been RAT's for every platform for a long time now. The purpose of professionally made JDB's is to distinguish the users OS and distribute the correct version of the virus. One for Windows, Linux, and Mac.

Don't be as ignorant as the rest of the Mac population and take some initiative.

[chillaxbro]

You are ignorant if you think viruses don't effect Mac's. There are and have been RAT's for every platform for a long time now. The purpose of professionally made JDB's is to distinguish the users OS and distribute the correct version of the virus. One for Windows, Linux, and Mac.

Don't be as ignorant as the rest of the Mac population and take some initiative.

Dude what the fuck??? Did i say that nothing will happen to me? I just asked what would happen

[๖ۣۣۜۜFear]

Is this a silent JDB?

Thanks for share, btw.

[E36·]

I just don't even have java installed. I don't need it anyway.

[Inmodwetrust]

Thanks for the head's up, It's much appreciated.

[Moneytize]

This made me laugh cuz it isnt 0day anymore lulz....

[Antigen]

@๖ۣۜInmodwetrust™, Ozuru : You are welcome dudes,
@Dude: I know but until this vulnerability get a name every body have to call it 0day most likely.

[tux1]

Is this a silent JDB?

Thanks for share, btw.

Yes it is silent. This message is long enough.

[Super Effective]

Dude what the fuck??? Did i say that nothing will happen to me? I just asked what would happen

I do admit I read your post wrong, but my post still answers your question (in an admittedly mean way).

If you run Java, you are at risk at all the basic things that come with Java Drivebys. Just disable it and you should be fine. There is nothing special that happens with Macs.

[7ewis]

Is the site safe to visit now? Chrome told me it was infected with malware, so I'm on my iPod touch now.

Don't want to get into the arrogant 'I don't get any viruses' sorta thing either, but I'm running Ubuntu 12.04, what could it do?

Also, I think we need a guide on how to remove this malware from the HF staff! I probably don't know what in talking about so can someone explain :p

[Super Effective]

Is the site safe to visit now? Chrome told me it was infected with malware, so I'm on my iPod touch now.

Don't want to get into the arrogant 'I don't get any viruses' sorta thing either, but I'm running Ubuntu 12.04, what could it do?

Also, I think we need a guide on how to remove this malware from the HF staff! I probably don't know what in talking about so can someone explain :p

I'll say it again, along with all the other threads posted here. Disable/Uninstall Java until it's fixed. I'm running Debian and never had Java in the first place, so I feel pretty safe.

[r0n1n]

Can NoScript prevent this exploit, or there's no other way except disabling java totally?