Malware incursions into enterprises now largely come from infected websites - often legitimate ones. Appeals to users to browse cautiously are ineffective. The release of IE 8 has highlighted the issue. We examine the available options for protection.