Apple macOS Screen Sharing Flaw: Active Exploitation

**Apple macOS Screen Sharing Flaw (CVE-2026-65400)** — A critical authentication vulnerability in macOS Screen Sharing (CVSS 9.8) has been actively exploited where internet-accessible TCP port 5900 allowed unauthenticated access, enabling attackers to obtain root privileges and deploy a Monero miner; Apple released patches for Tahoe 26.6.1, Sequoia 15.7.9 and Sonoma 14.8.9 and guidance urges immediate patching, disabling unnecessary Screen Sharing, and auditing network exposure and signs of compromise.