Microsoft expected to patch the vulnerability later today, but meanwhile, here's what we know and what you can do to protect yourself