Citation needed on malware not being able to be installed without user interaction! I don't trust CNN to monitor those 41 domains. I don't expect CNN to monito

Citation needed on malware not being able to be installed without user interaction! I don't trust CNN to monitor those 41 domains. I don't expect CNN to monitor those 41 domains. The very point of an ad-broker service that allows the highest bidder to inject their own content into a website is that CNN doesn't know ahead of time who's going to provide the content for a particular view. If a website uses an ad-broker which permits - or can be tricked into allowing - adverts which aren't just simple static content - e.g. allowing javascript, SVG, web fonts: anything which might have browser bugs exploitable by malware - there could be a problem.