Microsoft bombs another security test