Apple is blocking the compromised certificates automatically. Mac administrators can take optional steps for some command-line tools.