An AI agent built a working exploit for this macOS flaw in four hours
A security company built working exploits for two pre-authentication root bugs in macOS. It took four hours.
The firm, Calif, used an AI agent. It now withholds technical details of one of those bugs, CVE-2026-65400, until most Macs carry the patch. The reason is the speed. Producing the exploit was too easy.
Attackers are using that bug right now.
What is happening to unpatched Macs
The Dutch national cyber security centre revised its advisory on 12 August. It had received a report of active abuse. The affected systems all had port 5900 reachable from the internet.
“In all these cases, root had been accessed on the affected system and a Monero crypto miner had been placed,” the agency said.
Every confirmed case. Root, then a miner.
The macOS Screen Sharing flaw lets an attacker on the network authenticate to the remote desktop service without valid credentials. Apple calls itan...
Copyright of this story solely belongs to thenextweb.com. To see the full text click HERE
