Active attacks exploit macOS Screen Sharing flaw CVE-2026-65400 to gain root access

Attackers are exploiting CVE-2026-65400 in macOS Screen Sharing to obtain root access and install Monero cryptocurrency miners on exposed Macs. A working exploit was reportedly developed from Apple’s patch in about four hours, increasing the risk that more attackers will target systems with TCP port 5900 reachable from the internet. Internet-exposed Macs are at greatest risk Source

Read the full article at the source.