US tech firm issues software update after working with Citizen Lab to probe Candiru, which allegedly developed tools used to snoop on rights activists, others