New security loophole allows spying on internet users visiting websites and watching videos