Java 7 Update 21 - Applet Security Change Analysis

Oracle's Java 7 update 21 introduced UI changes that flag untrusted applets, but the underlying applet framework still permits full code execution once a user runs an applet; TrustedSec's testing using the Social-Engineer Toolkit shows the repeater behavior can still present shells and penetration-test success rates remained ~87% for self-signed applets, demonstrating that the visual warnings do not mitigate the practical risk of applet-based code execution.