Microsoft Publishes Workaround for ‘One-Click’ 0Day Under Active Attack