Witty worm frays patch-based security