The first thing you should do is update your devices if possible. Patches are coming as soon as possible, but in the short interim Cert has a list of patches currently available.
The reason patching your devices keep you safe is that it is a backwards compatible fix. If the device only installs the certificate once, it will be immune to a replay attack.
The other good part is that these attacks are EXTREMELY targeted so you're probably safe without doing anything while waiting for a patch, but until then it's best to use HTTPS as much as possible, use an encrypted VPN you setup yourself, or avoid using wi-fi on un-patched devices if possible if this is an absolute concern.