That article strangely claims it's not Forbes' fault if their pages serve malware. Of course it's their fault and responsibility when they have freely chosen to work with this advertisement provider. Of course they should change the agency, and perhaps claim damages, but one can't transfer the responsibility on third parties.