Oracle releases Java 27 and Oracle JDK 27 with AI and security enhancements

Oracle has officially released Java 27 and Oracle JDK 27, marking the 18th feature release in its six-month cycle. The update introduces nine major JDK Enhancement Proposals (JEPs) designed to optimize performance for AI workloads, enhance security, and improve developer productivity.

Key security updates include the introduction of post-quantum cryptography (PQC) hybrid key exchange for TLS 1.3, aimed at protecting data against future quantum computing threats. Additionally, JDK Flight Recorder has been enhanced to automatically mask sensitive information like environment variables during troubleshooting.

Performance improvements are central to this release. The update makes the G1 garbage collector the default for all environments and implements compact object headers, which can reduce heap usage by 10–20% and increase throughput. The Vector API has also been introduced to improve processing speeds for AI inference, data analysis, and scientific computing.

To address evolving cyber threats, Oracle is transitioning toward a more frequent security update model, moving from quarterly to a near-monthly cadence through Critical Security Patch Updates (CSPU).