Trimble Cityworks zero-day flaw under attack, patch now