HTC of course, is quite adamant that they do not have any evidence of the vulnerability being exploited by any party(ies) to date, and are “working very diligently to quickly release a security update that will resolve the issue on affected devices”. Expect this patch to be delivered Over The Air (OTA) the moment the testers are happy with it.
Until that happens, you would do well to maintain an extra level of vigilance, especially when it comes to new installations of apps that might request for Internet privileges. Basically, HTC hopes that you will avoid “installing and updating applications from untrusted sources”, but that might be a bit of a challenge considering Google’s Marketplace security is based on the peer reporting model. Well, at least a fix is better than no fix, right?