Microsoft publishes security alert on IIS bug that causes 100% CPU usage spikes