News Outlook’s decades-old vulnerability allowed for catastrophic attacks without any user interaction