Flaws in cyber security firm’s firewall & VPN tech exposed 100k+ devices