Hackers are exploiting a critical, unpatched flaw in Windows