Apple released a bunch of EFI firmware updates for Intel Macs yesterday. Unfortunately, since to run EFI firmware updates you must run the updater app, shutdown the machine, then hold down the power button until it starts flashing, there is no way to automate these updates.
The best you can do is to write a script that checks the firmware versions and notifies the admin(s) that a machine needs an update. Then you schedule a visit and manually apply the update.
If anyone has a better idea – I’m all ears.