The latest patch is being described as: Just A Temporary Sticking Plaster "As a result, the Department of Homeland Security's Computer Emergency Readiness Team has recommended users should actually disable Java from running in web browsers, - even after applying the latest update. The warning is echoed by other experts, including Rapid 7 and Polish company Security Explorations." Read more here: Java Bug