Monero miner

Active Exploitation of CVE-2026-65400 in macOS Screen Sharing Deploys Monero Miner

The Netherlands National Cyber Security Centre (NCSC-NL) has issued an advisory warning that a critical authentication flaw in Apple macOS Screen Sharing (CVE-2026-65400, CVSS 9.8) is being actively exploited in the wild. Attackers are leveraging the vulnerability to gain unauthorized access to internet-exposed macOS systems and deploy a Monero cryptocurrency miner. Apple has released security updates to address the vulnerability, and users are strongly advised to apply the latest macOS updates immediately.