There is an email making the rounds that claims to be a Microsoft security update.  Microsoft does not distribute security updates through email.  Period.  Go here, to read a quick little article about it.