New Java security hole out

Another reason to disable Java for now:

This link shows more details. A nasty bug at this, since most people run Java at default settings.