I was just about to update the Java until I came upon a site known as Chicago Tribune update talking about. However, the bold words had said: U.S. says Java still risky, even after security update.
I only notice something like that and it seem that it was in google 3 hours ago...or so it said...