Businesses are under attack, says MS security head