OneNote: Microsoft plugs a major breach