Sophos Firewall zero-day bug exploited weeks before fix