It's time to set "click-to-play"

According to the lovely @SwiftonSecurity  there's at least one flash zero day out now, and you can get cryptolocker from malvertising

Instructions to set click-to-play are here:

http://www.howtogeek.com/188059/how-to-enable-click-to-play-plugins-in-every-web-browser/

In a nutshell:

1. Chrome - Settings-Advanced-Privacy-Content-Plugins-"Let me choose"
2. Firefox - Tools -> Addons -> Plugins drop-down -> Ask to Activate
3.  Internet Explorer -> gear icon -> Manage Add-ons -> Toolbars and Extensions -> Shockwave Flash Object plug-in under Adobe Systems Incorporated, right-click it, and select More information ->Remove all sites button