New security loophole allows spying on internet users’ online activity