Krebs on Security – (International) New Java exploit fetches $5,000 per buyer. Krebs on Security reported that an apparently unpatched zero-day vulnerability in Java is being sold on underground forums for $5,000 to limited buyers.