
🛡️ **macOS Screen Sharing Authentication Bypass (CVE-2026-65400) — Active Exploitation for Cryptomining**
Published Monday, August 17, 2026 at 10:29 AM PT BLUF: Apple’s recently patched macOS Screen Sharing vulnerability (CVE-2026-65400) is under active exploitation. Attackers bypass authentication, gain root access, and deploy Monero cryptominers on unpatched internet-facing Macs. Immediate action: patch macOS, isolate or disable Screen Sharing on exposed systems. DETAILS • Vulnerability: CVE-2026-65400 in macOS Screen Sharing permits unauthenticated remote access and root privilege escalation (confirmed by Netherlands NCSC, Help Net Security, BleepingComputer, The Hacker News, SecurityWeek, SecurityAffairs). ...