Microsoft is issuing an out of band security update tomorrow September 28,2010.
My personal suggestion is to avoid any online shopping and online banking for a day or two.
The exploit affects the Microsoft .net service that is used for keeping information on a Web server secure.
The SAN’s internet storm center sums up Microsoft’s advisory this way:
Translated, this means that the vulnerability undermines basic web application security.