Breakthrough poses a ‘real and substantial threat’ to password-protection mechanism employed across critical sectors, team says.