BLADE: Hacking Away at Drive-By Downloads
Summary: SRI International's Phil Porras says a government-funded research group is preparing to release a free tool called BLADE (Block All Drive-By Download Exploits) that sandboxes the browser to stop malicious payloads from being written to the hard drive. The group's test machines, run against sites infected with the Eleonore exploit pack and others, blocked 5,154 drive-by download infections, and Porras said no exploit site has yet gotten past the tool.
What you should know: The BLADE team's data shows top antivirus products gave lackluster detection of the malicious binaries those exploit sites delivered, and the attacks target outdated plugins rather than the browser itself - so the patch status of every plugin on your endpoints is the exposure, not the browser choice.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026