Apple and a Hacker's Future
Attackers are exploiting macOS screen-sharing flaw CVE-2026-65400 on exposed port 5900 to install Monero miners.
74
- Mentions · 7d0
- Mentions · 30d1
- All mentions3
- First seenAug 15, 2026
- Last mentioned26d ago
Timeline
3 articles · newest firstApple macOS Screen Sharing Flaw Exploited on Internet
Actively exploited CVE-2026-65400 in macOS Screen Sharing grants pre-auth root access; attackers deploy Monero miners on exposed systems.
82
macOS Screen Sharing Flaw Exploited to Deploy Monero Miners
Dutch NCSC confirms active exploitation of critical macOS Screen Sharing flaw CVE-2026-65400, granting root access and installing Monero miners.
80
Related CVEs
by mentions- CVE-2026-654002%9.8Authentication Bypass in Apple macOS Screen Sharing
- CVE-2026-43779<1%9.8A logic issue was addressed with improved restrictions
- CVE-2026-43760<1%8.6An access issue was addressed with improved access restrictions
- CVE-2026-43777<1%7.5This issue was addressed with improved input validation
Appears with
- Applevendor · 3
- macOSproduct · 3
- Califorganization · 2
- Monero minermalware · 1
- macOS Sonomaproduct · 1
- macOS Tahoeproduct · 1
- Screen Sharingproduct · 1
- Anthropicorganization · 1
- Dutch NCSCorganization · 1
- Claudeai model · 1
- Codexai model · 1
- NCSC-NLorganization · 1
- macOS Sequoiaproduct · 1
- NCSC-NLvendor · 1
- Claude Codeproduct · 1
- OpenAIorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.