Crypto collision used to hijack Windows Update goes mainstream