12 new flaws used for ransomware attacks