CVE Tools
Track your stack

Хакеры используют уязвимость в macOS Screen Sharing для установки майнеров

Хакер (xakep.ru)By Мария Нефёдова

Reported exploitedmacOS Screen Sharing

Our summary

The Netherlands' NCSC reported active exploitation of CVE-2026-65400, a critical authentication bypass in macOS Screen Sharing that grants attackers root access without valid credentials. This vulnerability allows intruders to install Monero cryptocurrency miners on affected systems, as evidenced by recent incident reports. Apple resolved the issue on August 6, 2026, by releasing patches for macOS Tahoe 26.6.1, Sequoia 15.7.9, and Sonoma 14.8.9.

Read at Хакер (xakep.ru)

Хакер (xakep.ru) publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker News⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser HijacksCVE-2026-65400
  2. SANS Internet Storm CenterApple Updates Everything - SANS Internet Storm CenterCVE-2026-65400
  3. The Hacker NewsCritical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active ExploitationCVE-2026-65400
  4. SecurityWeekCISA Urges Immediate Patching of Exploited Microsoft, VMware, Apple VulnerabilitiesCVE-2026-65400
  5. Check Point Research17th August – Threat Intelligence ReportCVE-2026-65400
  6. The Hacker News⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and MoreCVE-2026-65400
  7. Help Net SecurityAttackers exploit patched macOS Screen Sharing flaw to deploy cryptominerCVE-2026-65400
  8. SecurityWeekRecent macOS Screen Sharing Vulnerability Exploited in AttacksCVE-2026-65400
  9. The Hacker NewsApple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero MinerCVE-2026-65400
  10. Ars Technica (Security)Vulnerability giving attackers full control of Macs is under active exploitationCVE-2026-65400

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store