Around two years ago, researchers discovered serious firmware vulnerabilities in Mac laptops and desktops, and then developed a proof-of-concept worm to demonstrate how potentially damaging they could be. Since then, Apple has been pretty good about including EFI (extensible firmware interface) updates with its macOS security and software

Source: Hot Hardware – Millions Of Macs Left Vulnerable Without Critical EFI Firmware Security Updates From Apple