Java version 15 and above include a security flaw that could allow cybercriminals to digitally sign malicious files and data by forging genuine certificates and even two-factor authentication messages.
About the Author
Java Suffers from Crypto Bug That Could Allow Attackers to Bypass Digital Signatures, Oracle Releases Fix