Does it help to unplug your network connection when checking suspicious email?
As ‘the one ring to rule them all’, Apple’s Xcode SDK is in a unique position, and uniquely exposed to attack. Now that has happened.
Phishing attacks are being launched against MacKeeper, and there is a more theoretical problem with sandboxing.
The consensus is that Apple’s built-in malware protection is not that hot, and commercial anti-virus tools are next to useless. Does removing Java improve security more?
Apple’s products have become more popular with malware authors too. How does Yosemite improve defences against Trojans and other nasties?