Patch Java now, says Oracle. Leave the chocolate until later

Malicious web page could achieve remote PC takeover without authentication

Oracle is urging Java users to upgrade, ASAP, to crimp a very nasty bug in the desktop and browser plug-in versions of the software."