What you need to know about the Java exploit.

http://krebsonsecurity.com/2013/01/w...-java-exploit/