White House cites ‘active threat,’ urges action despite Microsoft patch