Oracle warns of security bug that hackers abused to breach 100+ companies