Beware any Java security update that you don't download directly from Oracle's website. The malware may be encountered when visiting websites that have been compromised with a crimeware toolkit and ...