diff --git a/clusters/exploit-kit.json b/clusters/exploit-kit.json
index 035eddc4..bab4139d 100755
--- a/clusters/exploit-kit.json
+++ b/clusters/exploit-kit.json
@@ -236,7 +236,7 @@
     }
 ,
     { "value": "BlackHole",
-      "description": "The BlackHole Exploit Kit has been the most popular exploit kit from 2011 to 2013. Its activity stopped with Paunch's Arrest (all activity since then is marginal and based on the old leak)",
+      "description": "The BlackHole Exploit Kit has been the most popular exploit kit from 2011 to 2013. Its activity stopped with Paunch's arrest (all activity since then is anecdotal and based on an old leak)",
       "meta": {
         "refs": [
 	  "",
@@ -251,11 +251,11 @@
     }
 ,
     { "value": "Bleeding Life",
-      "description": "Bleeding Life",
+      "description": "Bleeding Life is an exploit kit that got open source with its version 2",
       "meta": {
         "refs": [
-          "",
-          ""
+          "http://www.kahusecurity.com/2011/flash-used-in-idol-malvertisement/",
+          "http://thehackernews.com/2011/10/bleeding-life-2-exploit-pack-released.html"
         ],
        "synonyms": [
           "BL",