Microsoft says hackers used code flaw to steal emails from government agencies