Microsoft knew about software vulnerability prior to cyberattack