Homeland Security should stick to catching bombers, they are woefully behind on Internet and computer threats. Java vulnerabilities have always been known, that's why they release updates on a regular basis. And guess what, they released an update while Homeland Security was making their statement. Old news, nothing to see here.