The vulnerability was patched Monday, but hackers had already used it to spread malware.
http://www.wired.com/