Forget Flash, there are bigger fishes to catch: http://blog.andreineculau.com/2015/07/13/major-security-thre...