US warns on Java software as security concerns escalate