This new blog by Duo R&D Engineer Pepijn Bruienne covers updating Apple firmware, and how it can be less visible than patching software - it may not be something that is monitored in config management systems to the same extent software patching is.
In the case of Apple hardware, the combination of the model of Apple hardware you run and the version of the OS you run will determine whether firmware vulnerabilities are patched or not.
Read the blog to learn more.