● Covered by 3 sources · 3 reportsMedium impact3 negative
Apple Releases Emergency Fix for macOS Screen Sharing Vulnerability
Key points
- Apple released unexpected updates for macOS.
- The flaw allows unauthorized Screen Sharing access.
- Attackers could bypass authentication to control Macs.
- Users are advised to install the update immediately.
- The vulnerability affects macOS Tahoe, Sequoia, and Sonoma.
- Attackers can install crypto miners.
- Apple released macOS Sonoma 14.8.9, macOS Sequoia 15.7.9, and macOS Tahoe 26.6.1.
- The vulnerability is being actively exploited.
- The vulnerability is CVE-2026-65400.
- The vulnerability has been observed in the Netherlands.
- Attackers gain root access.
- Dutch officials issued a warning.
- The Netherlands National Cyber Security Centrum received notifications.
Emergency macOS Updates Issued
Apple released unexpected software updates on Thursday for all supported macOS systems. These updates address a serious vulnerability related to the Screen Sharing feature, which was introduced with macOS Sonoma in 2023.
Critical Screen Sharing Flaw Identified
The patched flaw allows an attacker to exploit the Screen Sharing feature to access and control a Mac without valid credentials. Normally, Screen Sharing requires a username and password for authentication, but this vulnerability bypasses that security measure. Apple considered the flaw serious enough to warrant an immediate fix.
Potential for Unauthorized System Control
An attacker exploiting this vulnerability could gain full control of a compromised Mac. This unauthorized access could lead to viewing personal files, tampering with system settings, installing malware, or enlisting the system in a botnet. While no active exploits have been reported, the potential for harm is significant, especially on unprotected networks.
Immediate Update Recommended
Users are strongly advised to install the updates immediately to protect their systems. The update can be accessed through System Settings, under General, by selecting Software Update. This action will mitigate the risk posed by the Screen Sharing vulnerability.
Updates
- The vulnerability is CVE-2026-65400.
- The vulnerability has been observed in the Netherlands.
- Attackers gain root access.
- Dutch officials issued a warning.
- The Netherlands National Cyber Security Centrum received notifications.
- The vulnerability affects macOS Tahoe, Sequoia, and Sonoma.
- Attackers can install crypto miners.
- Apple released macOS Sonoma 14.8.9, macOS Sequoia 15.7.9, and macOS Tahoe 26.6.1.
- The vulnerability is being actively exploited.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
A critical vulnerability in Apple's macOS Screen Sharing tool (CVE-2026-65400), previously patched, has now been observed in active exploitation in the Netherlands. Attackers are using this flaw to gain root access, view screens, open files, and install crypto mining software on affected systems, making the previously recommended software updates an urgent necessity.
A serious screen sharing vulnerability in macOS Tahoe, Sequoia, and Sonoma is now being actively exploited, allowing attackers to authenticate without credentials and install crypto miners. Apple previously released updates for these macOS versions to address the flaw, and users are urged to update immediately to prevent exploitation.
Apple has issued an urgent software update for macOS to patch a critical vulnerability in the Screen Sharing feature. This flaw could allow an attacker to gain unauthorized access and control over a Mac without needing valid credentials, posing a significant security risk.