Hackers Exploit macOS Screen Sharing Vulnerability to Mine Monero

Odaily Planet Daily reports that attackers are exploiting a vulnerability in Apple’s macOS Screen Sharing feature to take control of devices and install Monero mining software. Multiple systems exposing port 5900 to the internet have been compromised, with attackers gaining root access. The vulnerability, identified as CVE-2026-65400, has a severity score of 7.1 out of 10, stemming from a state management flaw in the authentication process that allows remote attackers to bypass login verification without valid credentials. A public proof-of-concept code is already circulating. Apple has patched this issue in macOS Sequoia 15.7.9, Sonoma 14.8.9, and Tahoe 26.6.1. The NCSC advises users to update their systems promptly and avoid exposing Screen Sharing services directly to the internet. (Decrypt)