Java vulnerabilities are increasingly exploited by attackers to infect computers. Oracle must do more to secure the product and keep its installation base up to date, researchers say. Java was acquired by Oracle as part of its 2010 acquisition of Sun Microsystems. Oracle could have a hard time dealing with such attacks because they’re not talking openly about security issues to vendors at the moment, researcher says. Oracle needs to take actions that would make Java a less attractive target for attackers, experts say. The majority of Java exploits used by attackers target vulnerabilities that have already been patched by Oracle.”]

