A little-known Microsoft program could expose the Defense Department to hackers