The new Java 0-day vulnerability is being exploited by hackers.

Security researchers said a previously unknown Java security vulnerability that has not yet been fixed is being exploited by hackers to secretly install malicious programs. Affected Versions include Java SE 6 Update 41 and the latest Java SE7 Update 15. If you use a vulnerable Java browser to browse websites with malicious code implanted, hackers can install malicious programs on their computers. Previously, computers for Facebook, Twitter, apple, and Microsoft employees were installed with malware because of the above methods. Kaspersky has also confirmed the new Java 0-day vulnerability, saying the attack looks targeted at a specific individual or organization.