December 16, 2016
On December 15, Apple released an update for macOS 10.12 (Sierra), 10.11 (El Capitan), and 10.10 (Yosemite). The update corrects a security flaw that can potentially allow an attacker to recover your password and bypass your disk encryption with an external device.
How will this affect you?
Using this vulnerability, attackers can retrieve your computer’s password by plugging in a Thunderbolt device into your locked or sleeping Mac. Then, your computer can be unlocked, making all data on your computer available.
What do you need to do?
Please update your Mac with the latest security patches. Please follow this official guide from Apple on how to check for and apply updates:
https://support.apple.com/en-us/HT201541