A high-severity macos vulnerability is under active exploitation, allowing attackers to execute malicious code and gain full control of macs. The vulnerability, tracked as CVE-2026-65400, has a severity rating of 7.1 out of 10 and stems from a bug in the macOS screen sharing capability.
This capability allows a remote party to view the screen and control the keyboard and mouse while a machine is turned on. A flaw in the state management, which keeps track of preceding events, user interactions, variables, and other system states, is the underlying cause.
Understanding the macos vulnerability
The Netherlands National Cyber Security Centrum warned earlier this week that active abuse of this vulnerability has been observed on multiple systems on which port 5900 was accessible from the Internet. In all these cases, root had been accessed on the affected system and a Monero crypto miner had been placed.
The vulnerability received a patch from Apple last week for macOS Tahoe, Sequoia, and Sonoma. However, the fact that it is under active exploitation highlights the importance of keeping software up to date and being cautious when using screen sharing capabilities.
Impact of the Vulnerability
The impact of this vulnerability is significant, as it allows attackers to gain full control of macs. This can lead to a range of malicious activities, including data theft, malware installation, and unauthorized access to sensitive information.
- Remote access to the screen and keyboard
- Ability to execute malicious code
- Potential for data theft and malware installation
Users can protect themselves by ensuring their software is up to date and being cautious when using screen sharing capabilities. It is also essential to monitor system activity for any suspicious behavior and to report any incidents to the relevant authorities.
Prevention and Mitigation
To prevent and mitigate the effects of this vulnerability, users should take several steps. These include keeping their software up to date, using strong passwords, and being cautious when using screen sharing capabilities.
Conclusion and Future Directions
In conclusion, the macos vulnerability under active exploitation highlights the importance of keeping software up to date and being cautious when using screen sharing capabilities. As the threat landscape continues to evolve, it is essential to stay informed about the latest vulnerabilities and to take proactive steps to protect against them.
Source: arstechnica.com.
Be First to Comment