- CVE‑2026‑65400 macOS Screen Sharing flaw exploited for cryptojacking within days of disclosure
- Attackers gained root via exposed port 5900 and deployed Monero miners using XMRig
- Apple patched in Sequoia 15.7.9, Sonoma 14.8.9, Tahoe 26.6.1; users urged to update immediately
Less than a week after being publicly disclosed, a macOS vulnerability plaguing Screen Sharing was observed as being used in cryptojacking attacks.