MacOS users warned to beware screen-sharing bug which can turn Macs into cryptomining slaves
- CVE‑2026‑65400 macOS Screen Sharing flaw exploited for cryptojacking within days of disclosure
- Attackers gained root via exposed port 5900 and deployed Monero miners using XMRig
- Apple patched in Sequoia 15.7.9, Sonoma 14.8.9, Tahoe 26.6.1; users urged to update immediately
Less than a week after being publicly disclosed, a macOS vulnerability plaguing Screen Sharing was observed as being used in cryptojacking attacks.
Alfredo Pesoli, a security researcher from Bynario, discovered an authentication issue in macOS Screen Sharing and reported it to Apple. Screen Sharing is a built-in macOS tool that allows users to remotely connect, and use, another Mac device. It is similar to third-party tools such as AnyDesk or TeamViewer and comes in rather handy for IT teams accessing Macs stored in closets or used by remote and home-working employees.
The bug allows a remote attacker to bypass authentication and gain access to a vulnerable Mac device without valid...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
