Lots of talk about Apple Security. Now the rest of the story....

As normal, Apple's joke security fell on the first day of the Pwn2Own hacking contest at CanSecWest hacker conference.
Safari on MacOS X and Internet Explorer 8 on Windows 7 fell in the first day despite Jobs' Mob hoping to scrape through by bring in a last-minute security update that the contestants would not have seen.
However it turned out that French penetration test company VUPEN were able to exploit a zero-day flaw in Apple's Safari browser to win in five seconds.

According to Eweek  VUPEN co-founder Chaouki Bekrar used a rigged Web site that compromised a 64-bit version of a fully patched Mac OS X running on a MacBook.
It had taken them two weeks to find the vulnerability in WebKit, which is Safari's rendering engine. So two weeks homework and five minutes to execute. 

Read more: http://www.techeye.net/security/apples-laughable-security-falls-in-five-seconds#ixzz1Iafv8mq9

Should the FTC ever make that fateful call to Cupertino, Apple can show a track record of customer safety, even with lower security. While Macs are theoretically more exposed to attacks than current versions of Windows, despite all the OS X vulnerabilities there are only a couple handfuls of malicious Mac software programs in the wild, and not a single widely seen self propagating virus. Macs do get compromised, but currently at a rate far lower than Windows systems. 

 

http://www.macworld.com/article/140873/2009/06/apple_java_security.html