US-CERT: Disable Java in browsers because of exploit