As critical Microsoft vulnerabilities drop, attackers may adopt new techniques