JDK 27: The quiet before the storm

Every September, with metronomic regularity, we have a new version of the Java platform. One small point about timing is that the first release candidate of JDK 27 was delayed by two weeks due to the release of the first Critical Security Patch Update (CPSU) for the JDK. The need for a CPSU is a direct implication of AI models , such as Anthropic’s Claude Mythos, becoming much better at identifying vulnerabilities and developing exploits.