First Java zero-day in two years exploited by Pawn Storm hackers

"Disabling Java in your preferred browser is for now is a better option. Use a secondary browser with Java enabled to view sites you absolutely must visit and which require it."

http://www.net-security.org