Critical flaw exposes OS X users