Yet another thing not to DIY

from here

Today I learned that there are open source ad servers that organizations can run themselves rather than going through a big name ad platform, and that those servers are (of course) vulnerable and being exploited to serve malware.