There is an email going around claiming to be from Oracle (the makers of Java) that contains a link and/or attachment to download a Java update. Clicking the link or opening the attachment can result in malware being installed on your system. If you get one of these emails, discard it, it is not real. Bottom line, Oracle is not sending out emails to let Java users know there is an update. If you are not sure you have the most recent version of Java, you can go to Oracle’s site and check.
via eweek