Six months on, Macs still plagued by critical Java vuln

No Java applets for you!
By Dan Goodin, 19th May 2009

More than six months after Sun Microsystems warned that a flaw in its Java virtual machine made it trivial for attackers to execute malware on end users' machines, the vulnerability remains unpatched on Apple's Mac platform. Most other operating systems, including Windows and major Linux distributions, fixed the bug months ago. That's a good thing given it is actively being exploited in the wild. Penetration testers, including Immunity Sec and VUPEN Security, consider the threat significant enough to offer their customers exploit code that tests against the bug. And yet Apple has so far taken no action, despite issuing major OS X upgrades just last week.

Read more here -->Link