And, according to this, so are the hackers. So if you haven't already disabled yours, here is how:-
Go into Control Panel, to the Java icon, and click on that to bring up the Java Control Panel. From the tabs along its top, select the Security tab. On its window, at the top, there's a little box, followed by the text which says "Enable Java content in the browser." Remove the check-mark from that little box, and then down below, click "Apply" and "OK". Close those windows. For good measure, do a reboot of your PC. And make sure your security programs have the latest updates.