Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner

The Netherlands National Cyber Security Centre (NCSC) warned that a critical authentication flaw in Apple macOS Screen Sharing, identified as CVE-2026-65400 with a CVSS score of 9.8, is being exploited. This vulnerability allows attackers to bypass credentials, remotely control keyboards and mice, and install Monero miners on internet-exposed Macs. Apple addressed this issue in the macOS Tahoe 26.6.1 update, released on August 6, shortly after the previous macOS Tahoe 26.6 version.