Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner

A critical vulnerability in Apple's macOS Screen Sharing component has been actively exploited in the wild to install a cryptocurrency miner. Researchers have discovered a pre-authentication vulnerability (CVE-2026-65400) that allows attackers to gain remote root access to Macs with Screen Sharing enabled, even without a password. Apple has released patches to address this and other related flaws, but due to the ease of exploitation, attackers are leveraging AI to quickly develop and deploy exploits, leading to widespread attacks.