An infamous Remote Access Trojan, a piece of Java-based malware that gives attackers a backdoor into Windows, Linux, Mac OS X and Android devices, has re-emerged -- after apparently being shut down last year -- now as a commercial "malware-as-a-service" platform.
Oracle has issued an out-of-cycle security patch to fix a vulnerability that can be exploited when installing Java on Windows. The vulnerability, which earned a CVSS Base Score score of 7.6, affects Java SE 6, 7 and 8.
Oracle's latest Critical Patch Update includes fixes for eight Java security holes, three of which were rated critical, earning Common Vulnerability Scoring Standard scores of 10.0.
Red Hat announced the availability of the first beta build of the JBoss Enterprise Application Platform (JBoss EAP), addressing new enterprise interest in containers and microservices.
Oracle has agreed to overhaul its Java security update process to settle Federal Trade Commission charges that the company deceived consumers by not informing them that the updates left older, still vulnerable versions of Java running on their computers.
Codename One wants the open source community to take its relatively new iOS Java VM and run with it.
IBM has announced a technology preview of its soon-to-be open sourced OMR toolkit to demonstrate how this internal adaptation of its own J9 Virtual Machine (VM) could be used with the Ruby virtual machine (VM).
Makers of the RethinkDB distributed JSON database today released a new Java client driver, the company announced.
Java runtime maker Azul Systems is partnering with Microsoft to provide a version of its open source Zulu JDK for Java developers who are creating Internet of Things applications on Windows 10.
NetBeans 8.1 is now generally available, supporting developers working with Java SE 8, Java SE Embedded 8, and Java ME Embedded 8, and adding a number of new tools and enhancements.
The Eclipse Foundation's Internet of Things Working Group has announced the second edition of its Open IoT Challenge, which pits individuals and teams of developers against each other to see who can create the most innovative IoT solutions using open standards and open source technologies.
It was first reported by security researchers nine months ago, but a vulnerability in the popular Apache Commons library continues to put thousands of Java applications and servers at risk of a remote code execution attack.
Pivotal has released a new version of its Cloud Foundry platform with expanded support for Spring Cloud Services, .NET applications, Docker images, Microsoft Azure and several ALM toolchain products.
JFrog launched a new product, JFrog Mission Control, to make it easier for users of its Artifactory binary repository manager to monitor and manage the thousands of binaries that often comprise a software release and what the company sees as an "explosion in binary artifact types."
Software development toolmaker JetBrains announced the availability of the beta release candidate of Kotlin 1.0, its open source programming language, for both Java Virtual Machines and Android.
Independent dev shop Infinium Inc. has published numbers from its own experience to back up its belief that Android development takes longer than equivalent iOS development and is thus more expensive.
RoboVM "closed sourced" the code used in its mobile app development tooling, citing no significant contributions to the project and thus no benefits derived -- and in fact accusing competitors of using the open source code against the company in commercial products.
Java runtime maker Azul Systems is providing developers with early access to Zulu 9, the latest version of its build of the OpenJDK, which will support the upcoming Java 9 SE platform.
The annual JavaOne conference got underway on Sunday with a two-hour keynote opener that covered upcoming changes in the Java language and platform and celebrated Java's 20th anniversary with history-of-the-platform video clips, a cake and a video message from Sun Microsystems co-founder Scott McNealy.
Oracle recently issued the last of its Critical Patch Updates for the year, featuring fixes for 154 new security vulnerabilities in virtually all Oracle products, including 25 new security fixes for Java SE.