Mac Users Face Monero Mining Threat From Newly Found Flaw
- Attackers are actively exploiting a macOS Screen Sharing flaw tracked as CVE-2026-65400.
- The exploit targets systems with port 5900 directly exposed to the internet.
- Apple released emergency security patches across macOS Tahoe, Sequoia, and Sonoma.
A critical authentication flaw in macOS Screen Sharing is leaving Apple devices exposed to unauthorized exploitation. The flaw allows attackers to bypass authentication and gain unauthorized administrative access by hijacking administrative access through the vulnerable desktop environment.
Some attackers have used compromised systems to deploy Monero mining software. Thus, security experts recommend installing Appleโs emergency updates immediately to avoid resource hijacking or serious performance issues.
Critical macOS Vulnerability Enables Unauthorized Monero Mining
Tracked as CVE-2026-65400, the flaw carries a critical CVSS severity rating of 9.8. Specifically, the bug relates to state management in the authentication system on the native Screen Sharing service.
โฆ Continue reading the full article at the original source below.
