2026-08-17 13:37
Odaily Planet Daily News The Dutch National Cyber Security Centre (NCSC) has reported that attackers are exploiting a vulnerability in Apple's macOS screen sharing feature to control devices and install Monero mining software. Multiple systems with port 5900 exposed to the internet have been compromised, with attackers gaining root access.
The vulnerability, identified as CVE-2026-65400, has a severity score of 7.1 out of 10 and stems from a state management error in the authentication process, allowing network attackers to bypass login verification without valid credentials. Public proof-of-concept code has been circulated.
Apple has addressed the issue in macOS Sequoia 15.7.9, Sonoma 14.8.9, and Tahoe 26.6.1. The NCSC advises users to update their systems promptly and avoid exposing the screen sharing service directly to the internet. (Decrypt)>
The vulnerability, identified as CVE-2026-65400, has a severity score of 7.1 out of 10 and stems from a state management error in the authentication process, allowing network attackers to bypass login verification without valid credentials. Public proof-of-concept code has been circulated.
Apple has addressed the issue in macOS Sequoia 15.7.9, Sonoma 14.8.9, and Tahoe 26.6.1. The NCSC advises users to update their systems promptly and avoid exposing the screen sharing service directly to the internet. (Decrypt)>
Bài viết đề xuất
