FireEye says tools used for testing clients’ security have been stolen, without naming the culprits.