New bug makes moot Java's latest anti-exploit defenses, claims researcher