THREAT actors are exploiting a newly patched macOS vulnerability, CVE-2026-65400, which enables remote access to systems via Screen Sharing without valid credentials. This high-severity flaw allows hackers to gain root access and deploy cryptominers. Apple released fixes on August 6, after which active exploitation was reported by the Dutch NCSC. The vulnerability can be triggered easily by naming an account, exposing around 40,000 internet-accessible macOS systems to potential attacks. Additionally, several other vulnerabilities in the same system component were patched recently.
Apple fixes macOS Screen Sharing bug exploited for crypto mining
CyberSIXT Evidence Panel
Article by CyberSIXT
Timeline Coverage
Swipe to explore timeline
-
Apple fixes macOS Screen Sharing bug exploited for crypto mining
www.securityweek.com
-
Hackers exploit CVE-2026-65400 to mine Monero on macOS
cybersixt.com
-
Apple patches CVE-2026-65400 macOS flaw after crypto miner attacks
cybersixt.com
-
Microsoft, Apple issue patches for critical RCE and auth bypass
cybersixt.com