Two new Mac exploits discovered recently are good reminders of best practices for staying safe, such as not letting strangers access your computer, staying up to date with software updates, and getting your software from known trusted sources.
The first exploit involves Parallels, the virtual machine that allows the Mac to run Windows, Linux, and older versions of macOS. The vulnerability is on Intel Macs running Parallels and allows an attacker to gain root access by exploiting holes in the Parallels VM creation routine. The attacker needs to have access to the Mac to perform this, however.
Read more at Macworld.com