PSA which if someone else mentioned I missed.

Department of Homeland Security recommends disabling Java (Java 7 update 10 or older) due to extremely high vulnerabilities. Announcement and a news article for reading.