Those still using IE9 or IE10 would do well to update to IE11.
http://arstechnica.com/...
New zero-day bug in IE 10 exploited in active malware attack, MS warns (updated)
For the nerds out there, rumor has it that
EMET stops this attack. EMET will painlessly harden your system. If you use it unwisely, your system can be hardened to the point even you can't use it, but at least the bad guys can't use it either in that case.
Version 4.1 can be downloaded here.
I accept no responsibility should you render your system unusable. All I can say is that it's running on my system with no problems.
Caveat emptor.