黑客利用macOS屏幕共享漏洞获取Root权限并挖掘Monero
2026-08-17 13:37
Odaily Planet Daily News: The Dutch National Cyber Security Centre (NCSC) has stated that attackers are exploiting a vulnerability in Apple macOS Screen Sharing to take control of devices and install Monero mining programs. Multiple systems with port 5900 exposed to the internet have been compromised, with attackers gaining root privileges.
The vulnerability, designated CVE-2026-65400, has a severity score of 7.1 out of 10 and stems from a state management error in the authentication process, allowing network attackers to bypass login verification without valid credentials. Public proof-of-concept code has been circulating.
Apple has fixed the issue in macOS Sequoia 15.7.9, Sonoma 14.8.9, and Tahoe 26.6.1. NCSC recommends users update their systems promptly and avoid exposing Screen Sharing services directly to the internet. (Decrypt)
The vulnerability, designated CVE-2026-65400, has a severity score of 7.1 out of 10 and stems from a state management error in the authentication process, allowing network attackers to bypass login verification without valid credentials. Public proof-of-concept code has been circulating.
Apple has fixed the issue in macOS Sequoia 15.7.9, Sonoma 14.8.9, and Tahoe 26.6.1. NCSC recommends users update their systems promptly and avoid exposing Screen Sharing services directly to the internet. (Decrypt)
おすすめ記事
