There's no evidence it is out in the wild, and from what I've read it's difficult to engineer, it's not script kiddie stuff.
So, yes, anyone should be applying all security patches promptly (indeed, use the feature to auto-update, then it does so – mostly – while you're asleep), but it's not apocalyptic.