Apple fixes the macOS screen sharing gap, which was used by the attackers to embed the Monroe miner program

According to The Hacker News, the Dutch National Cyber Security Centre (NCSC) warned that the serious authentication gap CVE-2026-65400 in the Apple MacOS screen sharing component had been used in the field and that the attackers could access Mac, which was exposed to the Internet, and plant it into the Monroe mining programme without a warrant. On 6 August, apples updated the loophole with MacOS Tahoe 26.6.1, Sequoia 15.7.9 and Sonoma 14.8.9. NCSC confirmed that the attackers had obtained root access and deployed mining software。