Typical shoddy tech reporting... they say it's a Java problem, and then talk about a JavaScript exploit. JavaScript is to Java as Velveeta is to Cheddar.
I was about to bring that up, but I like your analogy better. Just about the only thing that JavaScript and Java have in common is that they both have 'Java' in the name. Thus, the confusion.