ISC StormCast for Thursday, March 3rd 2016

By Johannes B. Ullrich, Ph.D. Cisco Static Password Bug
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-n3k
XSS Vulnerabilities in Web Ads
http://randywestergren.com/widespread-xss-vulnerabilities-ad-network-code-affecting-top-tier-publishers-retailers/
Trojan Claiming to Be Locky Removing Tools (german only)
http://www.mimikama.at/allgemein/vorsicht-offizielle-warnung-vor-computervirus-locky-ist-selber-ein-trojaner/
More Here