From Core Security, a comprehensive and disconcerting analysis of an OS X bug: [Unpatched] Apple OS X ATSServer CFF CharStrings INDEX Sign Mismatch (The Jailbreakme bug in OSX) (Hat tip to John Leyden for pointing it out.)
While Nitesh Dhanjani writes about Insecure Handling of URL Schemes in Appleʼs iOS at SANS (thank you Brian Krebs for that one). Also covered by Jeremy Kirk for MacWorld: Researcher: iPhone’s Safari dials calls without warning.
Old Mac
