Google thread analysis group disclosed a major Windows bug publicly.
Microsoft says Russian Hackers are using that unpatched bug to do phishing attacks.
However, you could take some precautions to avoid any kind of attack.
For more details, you could read Microsofts officialblog post.
