So Apple have known about this for a few days, at least. If it's as serious as it sounds, they'll hopefully have a patch v. soon, if not already; when was the latest security patch for 10.10?