← Apple, Opera and Yandex fix browser address bar spoofing bugs, but millions more still left vulnerable