TECH NEWS

Update Your Mac ASAP to Avoid This Screen Sharing Bug

https://i.extremetech.com/imagery/content-types/03Ztg0bDuS22Zmwy2WOUW2s/hero-image.fill.size_1200x675.png

Apple has released an emergency macOS update that patches a critical flaw in its built-in Screen Sharing tool. The vulnerability (CVE-2026-65400) lets a remote attacker bypass authentication, log in without a password, and gain full control of a Mac, including root access. Government security agencies have already caught attackers abusing the bug to install hidden Monero cryptocurrency miners on affected systems.

The issue comes from poor state management during authentication in Screen Sharing, which uses virtual network computing (VNC) on TCP Port 5900—the default port for remote desktop connections—to let one computer view another. If this port is accessible online, an attacker can take control of the system, including viewing the screen, using the keyboard and mouse, accessing files, running code, and remaining on the system without permission. Before the patch, one researcher found 40,000 Macs vulnerable to this exploit.

The US Cybersecurity and Infrastructure Security Agency (CISA) increased the...

Copyright of this story solely belongs to extremetech.com. To see the full text click HERE

Read more