Microsoft confirms hackers exploiting critical IE bug, promises patch