There is yet another hole in Internet Explorer. Although usually Microsoft patches browser well before public availability of exploit, they were hit by zero-day exploit. I will not get too much into how serious this exploit is and which browser versions are exactly jeopardized, but I must comment on measures to solve it.
First measure that is recommended by Microsoft is disabling JavaScript. While this might sound like good advice five years ago, I think it is most idiotic recommendation today.
Probably every site worth seeing is using JavaScript for one purpose or another. Disabling JavaScript for most of sites means same level of usability as not visiting anything in the first place.
If this is main line of defense, maybe it is time for new browser...