Active Exploitation of macOS Screen Sharing Vulnerability

A security vulnerability in macOS Screen Sharing is now being exploited in the wild. The flaw allows unauthorized network attackers to authenticate without valid credentials, granting them remote access to view screens, open files, and control keyboard and mouse inputs. The Netherlands’ National Cyber Security Center reported that attackers have used this access to install Monero cryptocurrency miners on affected systems.

Apple released security updates for macOS Tahoe 26.6.1, Sequoia 15.7.9, and Sonoma 14.8.9 on August 6.