Apple has pushed out a Mac OS X security update to plug a security hole that allows access to shared folders without a valid password. A new BootROM exploit which is unpatchable potentially opens the door to jailbreaks, a researcher said. Apple is opening its once-private bug bounty program to all researchers, as well as boosting vulnerability payouts and expanding the product scope to include MacOS. Apple has disabled the Walkie Talkie app from its Apple Watch products after a vulnerability was discovered enabling bad actors to eavesdrop on iPhone conversations.
Source: https://threatpost.com/apple-patches-mac-os-x-info-stealing-hole-092110/74500/