Aramco still in damage-control from cyber-attack