Both exploits takeadvantageof the Blackhole exploit kit, an off-the-shelf hacking tool that was updated last month to prey on the Java vulnerability, such that users who run the Java plug-in can have their PC entirely compromised via their browser when they visit an infected site.