Dark Reading has picked this up now as well, and there are other vulnerabilities now coming up that you may want to keep an eye on.

http://www.darkreading.com/security/vulnerabilities/showArticle.jhtml?articleID=212400508

Latest from SANS is that IE6 and IE8 Beta are also open to in the wild attacks being circulated.

Overview of that:

http://isc.sans.org/diary.html?storyid=5470

SQL Injection Overview from SANS for IE Exploit:

http://isc.sans.org/diary.html?storyid=5464

Sophos Blog:

http://www.sophos.com/blogs/gc/g/2008/12/12/unpatched-microsoft-internet-explorer-vulnerability-being-actively-exploited/

As we learn more about this we will post information here for possible work around patches, Microsofts response, and any other related material.

David Feligno

Network Security Group, Inc.