Microsoft fixes first known zero-click attack on an AI agent