Only one day after Oracle fixed a highly-publicized hole in Java, a new zero-day attack surfaced on online hacker forums. The zero-day owner says the exploit will be released to the highest bidder.