Hackers are actively exploiting a bug in cPanel, used by millions of websites