First, the bad news. Once again, Mac users are at risk due to a flaw in Java, similar to the one that enabled the Flashback Trojan. Even worse, there isn’t (yet) a patch to fix that vulnerability. But ...

Beware any Java security update that you don't download directly from Oracle's website. The malware may be encountered when visiting websites that have been compromised with a crimeware toolkit and ...