Disable Java NOW, users told, as 0-day exploit hits web

yeesh. this is like the stuff of nightmares. they can just up and force a keylogger onto your system using something almost everyone uses. D:

The vulnerability allows attackers to use a custom web page to force systems to download and run an arbitrary payload

So, you'd still have to visit their "custom web page" to get infected.
Of course they could hack into an innocent website and install their script on there, so better safe than sorry.