Zero-day exploit bypasses Windows security features, affects Lenovo ThinkPads