EFI updates are delivered alongside OS updates... The problem I've noticed is if you skip a point update, it may not get installed when you later install a combo update.
I've had to manually download the point update with the EFI update in question, extract the EFI update, and manually run it.