Apple WebKit bugs on iOS and macOS allowed 1B scam popup ads on websites