Firefox zero-day: Mozilla races to patch bug used to attack Tor browser users