Oracle's Java Software Still A Major Worry, Despite Recent Fixes

I will note as I have previously, Java is notoriously full of endless holes leaving one open to security attacks. This is not new, and there is zero reason to think it can ever be fixed. As I have said, you have no need for it, so turn it off permanently -- or you will always be subject to a breach. I turned mine off a few years ago for this very reason -- and I have never had a problem for lack of Java. It is basically outdated and obsolete and gets little use on the Web now. (But don't confuse it with JavaScript. Leave that on.)