A new exploit could steal encrypted Windows password files