Threatpost – (International) Nasty new Java zero day found; Exploit kits already have it. A researcher discovered and others confirmed a zero-day exploit for Java that is already being used by the popular Blackhole, Nuclear Pack, and Cool exploit kits.
Source: http://threatpost.com/en_us/blogs/nasty-new-java-zero-day-found-exploit-kits-already-have-it-011013