Attackers exploit zero-day flaws in Chrome, Safari and Internet Explorer