Flash and Java still as vulnerable as ever, says Microsoft

Microsoft's latest Security Intelligence Report for the second half of 2013 sees Java and Flash as the top attack vectors, with Java being nearly the default