Review your servers, your patches and your authentication policies - there's a proof-of-concept out