The Dutch National Cyber Security Centre (NCSC) revealed on August 16 a critical vulnerability affecting the screen sharing service in macOS, currently being exploited to compromise Macs connected to the Internet. This flaw, referenced as CVE-2026-65400, allows an attacker to bypass authentication and gain root access to affected systems without a valid password. In all reported cases, a Monero (XMR) cryptocurrency miner was installed on the compromised machines. Apple released emergency patches on August 6 for macOS Tahoe 26.6.1, macOS Sequoia 15.7.9, and macOS Sonoma 14.8.9, with installation recommended as an immediate priority. This vulnerability could also enable more damaging activities, including credential theft, data exfiltration, and ransomware deployment.
Source: Read the original article
