Not specifically examples of arbitrary JS execution, but the SANS ISC has had a couple of posts in the last few days about Google Ads being used as an attack ve

Not specifically examples of arbitrary JS execution, but the SANS ISC has had a couple of posts in the last few days about Google Ads being used as an attack vector if anyone's interested: https://isc.sans.edu/diary/PSA+Why+you+must+run+an+ad+blocker+when+using+Google/29438/ https://isc.sans.edu/diary/PSA+Why+you+must+run+an+ad+blocke... and https://isc.sans.edu/diary/Malicious%20Google%20Ad%20--%3E%20Fake%20Notepad%2B%2B%20Page%20--%3E%20Aurora%20Stealer%20malware/29448 https://isc.sans.edu/diary/Malicious%20Google%20Ad%20--%3E%2... (and the second link contains links to a bunch of additional examples)