Microsoft fixes Windows security flaw under attack by hackers