Microsoft is actually pretty good about warning users about active attacks abusing unpatched vulnerabilities in Internet Explorer. — Harris et al, Gray Hat Hacking: The Ethical Hacker's Handbook (2007).