Science & Technology
Critical security vulnerability identified in macOS Screen Sharing
A flaw in macOS's Screen Sharing feature allows hackers to gain access without authentication, leading to real-world attacks.
The National Cyber Security Centre of the Netherlands (NCSC-NL) has warned of a critical security vulnerability in the Screen Sharing feature of macOS. The flaw, identified as CVE-2026-65400, allows attackers to bypass authentication, enabling them to access affected Macs, especially if port 5900 is open.
On August 6, Apple released an urgent update that addresses the vulnerability in macOS Tahoe (26.6.1) as well as older versions like Sequoia (15.7.9) and Sonoma (14.8.9). In the brief patch notes, Apple thanked security researcher Alfredo Pesoli of Bynario for his insights regarding this vulnerability.
According to reports, the vulnerability is actively being exploited by criminals to gain unauthorized access to computers. Specifically, it is being used to install Monero miners on affected systems, posing significant security risks for users.
The discovery of the vulnerability and the subsequent attacks prompt users of the affected macOS versions to take urgent action to protect their systems by installing the provided security updates. The NCSC-NL has urged users to take precautions and not to delay the installation of the update.