The vulnerabilities may have been exploited in 'an extremely sophisticated attack against specific targeted individuals' ...