Hackers can use Microsoft’s Power Automate to push out ransomware and key loggers—if they get machine access first.