OP 29 August, 2026 - 10:03 PM
Hackers have begun actively exploiting critical vulnerability CVE-2026-65400 in macOS. It's related to the Screen Sharing feature, allowing users to bypass authentication and gain remote access to computers.
The Dutch Cybersecurity Center has already recorded real-world attacks on Macs with port 5900 open to the internet. In all known cases, the attackers gained root access and installed the Monero miner.
A separate researcher previously discovered another Screen Sharing vulnerability, which could be exploited simply by knowing the Mac's IP address. He estimates that Screen Sharing was accessible over the internet on approximately 40,000 devices .
Most interestingly, cybersecurity researchers at Calif claim to have used an AI agent to create working exploits for two similar vulnerabilities in just four hours .
The Dutch Cybersecurity Center has already recorded real-world attacks on Macs with port 5900 open to the internet. In all known cases, the attackers gained root access and installed the Monero miner.
A separate researcher previously discovered another Screen Sharing vulnerability, which could be exploited simply by knowing the Mac's IP address. He estimates that Screen Sharing was accessible over the internet on approximately 40,000 devices .
Most interestingly, cybersecurity researchers at Calif claim to have used an AI agent to create working exploits for two similar vulnerabilities in just four hours .
Apple has already released patches. Users are advised to update macOS, or if that's not possible, disable Screen Sharing.
![[Image: Pn2slWO.jpeg]](https://i.imgur.com/Pn2slWO.jpeg)
LIFETIME