While malicious software that exploits an unpatched vulnerability in Microsoft Corp.'s Windows operating system is by now the most widely reported threat on the Internet, Microsoft continues to urge customers to wait another week for its official security update.