US government agencies attacked by hackers in software update