Microsoft left internal passwords exposed in latest security blunder