Hundreds of millions of users and an estimated 2.5 billion devices are reportedly exposed to potential attacks.