By Johannes B. Ullrich, Ph.D. More Malicious JavaScript Obfuscation
https://isc.sans.edu/forums/diary/More+Malicious+JavaScript+Obfuscation/20703/
Emergency Java Patch
https://blogs.oracle.com/security/entry/security_alert_cve_2016_0603
Hard Coded SSH Passwords in Trane ComfortLink Thermostats
http://blog.talosintel.com/2016/02/trane-iot.html#more
More Here