Hacking Team dump: Windows zero-day, Microsoft patches flaw pitched to spyware vendor