Wire · technology
Apple patches actively exploited macOS Screen Sharing authentication flaw
◆ Sectors
◆ Geography
◆ Source
◆ Verified
Fusion42 · 16 August 2026 · Fusion42 review
Apple has patched a critical authentication flaw in macOS Screen Sharing (CVE-2026-65400) that was actively exploited to gain root access and install Monero miners on internet-exposed Macs. The fix covers macOS Tahoe, Sequoia, and Sonoma versions, with exposure primarily via TCP port 5900.
This Wire brief sits within Fusion42's coverage of Security: Cybersecurity, and 3 sources have reported it between 15 Aug 2026 and 16 Aug 2026.
◆ ◆ The Wire takeaway
You must prioritise patching Macs exposed to public internet ports or disable Screen Sharing immediately to block active cryptocurrency mining attacks. This flaw turns your support remote access into a direct takeover route for malicious actors.
◆ Coverage
3 sources · first reported 15 Aug 2026 · latest 16 Aug 2026
◆ Related on Wire
◆ Topics