Apple patches two zero-day flaws abused to install the Pegasus spyware