UPDATE, Thursday, Aug. 30, 4:16 p.m.: Oracle has issued a new version of Java that it says fixes the vulnerabilities described below. For more, see my ...

In a rare act of cooperation, Oracle and IBM have submitted a joint request for a new specification that will define how Java applications query databases using a proposed language called XQuery.

Lest you think disabling Java in your browser is too extreme a step, consider that both Apple and Mozilla responded to the latest vulnerability by essentially doing just that. You can do the same ...