Dutch officers have warned {that a} high-severity macOS vulnerability that permits attackers to execute malicious code is underneath energetic exploitation.
“The NCSC has obtained a notification indicating that energetic abuse of this vulnerability has been noticed on a number of techniques on which port 5900 was accessible from the Web,” the Netherlands Nationwide Cyber Safety Centrum warned earlier this week. “In all these circumstances, root had been accessed on the affected system and a Monero crypto miner had been positioned.”
Have you learnt in case your display screen sharing is on?
The vulnerability, tracked as CVE-2026-65400, obtained a patch from Apple final week for macOS Tahoe, Sequoia, and Sonoma. The vulnerability, with a severity ranking of seven.1 out of 10, stems from a bug within the macOS display screen sharing functionality, which permits a distant social gathering to view the display screen and management the keyboard and mouse whereas a machine is turned on. A flaw within the “state administration,” which retains monitor of previous occasions, person interactions, variables, and different system states, is the underlying trigger.
