Windows Server Update Services bug exploited in the wild