Anyone that has been following the security landscape the past few days knows a zero day IE attack was used during the Gmail attack that took place the 12th of January and lead to the Google statement that they would consider pulling out of China.
Since then the Zero Day IE exploit that uses an invalid pointer in IE has been looked at in all detail by the good, the bad and the ugly. There is exploit code out in the wild for every to enjoy and as a result MS as released an out of band security update that you should install NOW!
Head out to your local MS update site and update your PC’s asap. It’s important to know that even though the initial issue was thought to be limited to IE6, this is not the case and you need to patch IE7 and 8 too.
http://www.update.microsoft.com
more info:
http://blogs.technet.com/sus/archive/2010/01/21/microsoft-security-bulletin-ms10-002-978207-released-today.aspx
http://www.microsoft.com/technet/security/bulletin/ms10-002.mspx