Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation
CISA added four critical actively exploited flaws to KEV: macOS Screen Sharing, SharePoint, VMware vCenter, and Microsoft IKE, with APT and ransomware use.
86
Malware
Monero miner
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenAug 15, 2026
- Last mentionedAug 19, 2026
Timeline
2 articles · newest firstmacOS Screen Sharing Flaw Exploited to Deploy Monero Miners
Dutch NCSC confirms active exploitation of critical macOS Screen Sharing flaw CVE-2026-65400, granting root access and installing Monero miners.
80
Related CVEs
by mentions- CVE-2026-654002%9.8Authentication Bypass in Apple macOS Screen Sharing
- CVE-2026-3382477%9.8Unauthenticated Double-Free RCE in Microsoft Windows IKE Extension
- CVE-2026-593103%9.8Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
- CVE-2026-5504070%9.1Authentication Bypass in Microsoft SharePoint Server
Appears with
- macOSproduct · 2
- Applevendor · 2
- Microsoft Internet Key Exchange Service Extensionsproduct · 1
- VMware vCenterproduct · 1
- reverse_sshmalware · 1
- Unit 42organization · 1
- Broadcomvendor · 1
- Chinese-speaking threat actorthreat actor · 1
- DeepSeekai model · 1
- Califorganization · 1
- China-nexus APTthreat actor · 1
- Bynarioorganization · 1
- Microsoftvendor · 1
- Microsoft SharePointproduct · 1
- Babuk-derived ransomwaremalware · 1
- VMwarevendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.