Microsoft today said that hackers are exploiting a critical, but unpatched, vulnerability in IE8 and IE9. Its engineers are working on an update to plug the hole. …