Sophos trumpets so-called Mac vulnerabilities in attempt to sell so-called security software