Is Java Putting Your SMB At Risk? - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Mobile // Mobile Applications
12:28 PM
Keith Ferrell
Keith Ferrell

Is Java Putting Your SMB At Risk?

Java exploits are on the rise, and sharply so, exceeding PDF attacks by a factor of 60 to 1, according to Microsoft. Is it time to cut off Java in your workplace?

Java exploits are on the rise, and sharply so, exceeding PDF attacks by a factor of 60 to 1, according to Microsoft. Is it time to cut off Java in your workplace?There's an unavoidable, I think, progression in the growth of attacks against Java.

That progression, as pointed out in a recent Microsoft security blog, has steepened dramatically over the past couple of years, with the quarter just ended showing -- according to Microsoft -- more than 6 million attacks aimed at Java, compared to around 100,000 targeting PDF vulnerabilities.

The reason for the growth? Java -- and its vulnerabilities -- may not be as obvious even to security-savvy businesses as browsers, applications and other common attack targets. This is a dilemma with anything that runs in the background, but Java's popularity makes Java a bigger dilemma.

As a result -- along with other factors including the number of Java versions out there -- the number of unpatched Java holes remains higher than the number (still too high) of unpatched or not-upgraded higher profile programs.

Which begs the question, in some ways.

While you should take an inventory of your business's Java deployments, and take steps to ensure that every version in your system is the latest version, you should also ask yourself:

Just how much Java does the business really need?

What business purposes are served by providing employees Java-enabled platforms?

If you can't come up with a good answer to that one, your Java audit should also include a Java-disabled audit.

Of course, if you're running a Mac-based business, Java and its vulnerability issues is increasingly irrelavent.

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
2021 Outlook: Tackling Cloud Transformation Choices
Joao-Pierre S. Ruth, Senior Writer,  1/4/2021
Enterprise IT Leaders Face Two Paths to AI
Jessica Davis, Senior Editor, Enterprise Apps,  12/23/2020
10 IT Trends to Watch for in 2021
Cynthia Harvey, Freelance Journalist, InformationWeek,  12/22/2020
White Papers
Register for InformationWeek Newsletters
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you.
Flash Poll