If businesses have failed to update the widely used but out-of-date Java 6 platform, they may be at heightened risk of cyberattack thanks to additions to commercial exploit kits.