Malware Hub Report MRG Effitas Exploit and Post-exploit Protection Test

We think that the best way to test exploit protection capabilities of products is to keep them offline and test them against exploit techniques in this state [...] People browse the web very often with outdated software (both at home and in the enterprise) and these outdated applications have known vulnerabilities [...] Outdated browser and Office environments are very “popular” in enterprise environments because of compatibility issues, lack of proper patch-management, etc.

Offline protections + exploiting outdated unpatched software