Apple fixes zero-day flaw used in 'extremely sophisticated' attacks