Apple have reported a bug in their most recent operating system, High Sierra, which allows anyone to gain access to a Mac computer with the username ‘root’ and without a password.
BU IT managed Macs have not been not affected by this bug, but if you're using your own Mac then you can follow the  on the 'root' password and how to disable it.
Apple have now released an  which allows you to update your Mac OS to the latest version.