Facebook and Twitter are exposing users to phishing attacks by opening links in new windows