Firefox zero-day: Mozilla, Tor issue critical patches to block active attacks