OT: IE security vulnerability

I just got an email from my office saying the security team wants to make
everyone aware of a new Internet Explorer javascript security exploit that
is making its way around the internet today. The new IE exploit does not
have a patch yet from Microsoft and does *NOT* require any action by the
user – all you have to do is hit the website that has the exploit on it and
you will be infected.
They recommend not using IE to the extent possible and NOT clicking on any
link in an email, as many apparently legitimate emails have the bad link.
Smokey