Exploit kits come and go, but the exploits they use remain the same, according to Securelist s mid-year analysis of exploit kits and attack vectors. In 2010, the report claims that some 40 percent of new exploits targeted Java. 11 of the top 15 exploit kits include at least one java exploit, seven of which include more than one. Two of the emerging kits, Blackhole and Incognito, serve a nearly identical list of exploits, says Kaspersky Lab expert.
Source: https://threatpost.com/new-analysis-finds-java-weakest-link-security-chain-080411/75511/