Bad guys have apparently begun exploiting the security hole that can take over a Windows machine simply by displaying an image. This vulnerability requires patching both the OS and Microsoft Office.