Apple patches macOS flaw exploited to mine Monero

cryptonews13:26

Apple has patched a critical macOS Screen Sharing vulnerability after attackers exploited internet-facing Macs to gain root access and install Monero mining software, according to an updated warning ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2660102945?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-08-17 13:26","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2660102945","market":"sh","top_or_hot":-1,"title":"Apple patches macOS flaw exploited to mine Monero","media":"cryptonews","content":"<div>\n<p>Apple has patched a critical macOS Screen Sharing vulnerability after attackers exploited internet-facing Macs to gain root access and install Monero mining software, according to an updated warning ...</p>\n\n<a href=\"https://crypto.news/apple-patches-macos-flaw-exploited-to-mine-monero/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Apple patches macOS flaw exploited to mine Monero</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nApple patches macOS flaw exploited to mine Monero\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-08-17 13:26 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/apple-patches-macos-flaw-exploited-to-mine-monero/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Apple has patched a critical macOS Screen Sharing vulnerability after attackers exploited internet-facing Macs to gain root access and install Monero mining software, according to an updated warning ...</p>\n\n<a href=\"https://crypto.news/apple-patches-macos-flaw-exploited-to-mine-monero/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":null,"symbol_name":null,"start_time":0,"source_url":"https://crypto.news/apple-patches-macos-flaw-exploited-to-mine-monero/","article_id":"2660102945","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/apple-patches-macos-flaw-exploited-to-mine-monero/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2660102945","pubTimestamp":1786944401,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"Apple has patched a critical macOS Screen Sharing vulnerability after attackers exploited internet-facing Macs to gain root access and install Monero mining software, according to an updated warning from the Netherlands’ National Cyber Security Centre.Apple patched CVE-2026-65400 after attackers exploited Mac Screen Sharing services to install Monero miners remotely.Dutch cybersecurity officials confirmed compromised Macs had root access and unauthorized Monero mining software installed.CISA now scores the authentication flaw 9.8 critical, up from its earlier 7.1 assessment overall.Apple patched CVE-2026-65400 on Aug. 6 in macOS Tahoe 26.6.1, Sequoia 15.7.9 and Sonoma 14.8.9. The company described it as an authentication flaw caused by improper state management that could allow an attacker on the network to access Screen Sharing without valid credentials.The flaw now carries a 9.8 critical CVSS score from CISA’s vulnerability analysis, with no privileges or user interaction required un","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{},"translate_title":"苹果修补了用于开采门罗币的 macOS 漏洞","themeId":null,"isJumpTheme":false,"ttsUrl":"https://static.tigerbbs.com/5b3f6524a52d479b2cfbe4f9d3e55dff","symbols_score_info":{"IXN":0.6,"TYLG":0.6,"AAPL":1.97,"MACW.SI":0.6,"METV":0.6,"VT":0.6,"TTXU":0.6,"APLY":0.6,"AAPE":0.6,"AAPW":0.6,"FTEC":0.6,"JGRO":0.6,"ABFL":0.6,"SPTE":0.6,"AAPD":0.6,"SAAPLmain":0.6,"VGT":0.63,"ROM":0.6,"AAPX":0.6,"AAPY":0.6,"AAPU":0.6,"XLK":0.6,"CMAG":0.6,"AAPB":0.6},"content_text":"Apple has patched a critical macOS Screen Sharing vulnerability after attackers exploited internet-facing Macs to gain root access and install Monero mining software, according to an updated warning from the Netherlands’ National Cyber Security Centre.\n\n\nSummary\n\n\n\nApple patched CVE-2026-65400 after attackers exploited Mac Screen Sharing services to install Monero miners remotely.\nDutch cybersecurity officials confirmed compromised Macs had root access and unauthorized Monero mining software installed.\nCISA now scores the authentication flaw 9.8 critical, up from its earlier 7.1 assessment overall.\nHuntress found tens of thousands of potentially exposed Macs, especially internet-hosted bare-metal Apple systems worldwide.\nChanging Screen Sharing passwords cannot fix the flaw; affected Macs require Apple security updates immediately.\n\n\n\nThe Dutch NCSC updated its advisory on Aug. 12 to confirm active exploitation of CVE-2026-65400 on multiple systems with port 5900 exposed to the internet. In every reported case, attackers obtained root access and installed a Monero miner. The agency did not disclose how many Macs were compromised or identify the attackers.\nApple Screen Sharing flaw bypasses authentication\nApple patched CVE-2026-65400 on Aug. 6 in macOS Tahoe 26.6.1, Sequoia 15.7.9 and Sonoma 14.8.9. The company described it as an authentication flaw caused by improper state management that could allow an attacker on the network to access Screen Sharing without valid credentials.\nSecurity firm Huntress found that the flaw affects the Secure Remote Password authentication process used by macOS Screen Sharing. Its analysis showed an attacker could cause the service to treat an unauthenticated connection as authenticated and obtain privileged access.\nBecause exploitation occurs before normal authentication, Huntress said changing a Screen Sharing password, disabling legacy VNC authentication or removing authorized user accounts does not address the vulnerability. The recommended fix is installing Apple’s latest security update or disabling Screen Sharing until the system can be patched.\nTens of thousands of Macs may have been exposed\nHuntress researcher Ryan Dowd said a Censys search identified “tens of thousands of potentially vulnerable hosts.” That estimate covers Macs that appeared exposed to the internet and should not be interpreted as tens of thousands of confirmed compromises.\nThe risk is particularly relevant to hosted bare-metal Macs, including Mac minis rented for remote workloads. Huntress said some hosting environments expose Screen Sharing services on newly provisioned machines, increasing the attack surface when systems have not yet received Apple’s Aug. 6 patches.\nThe flaw now carries a 9.8 critical CVSS score from CISA’s vulnerability analysis, with no privileges or user interaction required under its current assessment. The National Vulnerability Database shows that CISA upgraded the scoring on Aug. 14 after initially assigning a lower severity assessment.\nHackers used compromised Macs to mine Monero\nThe Dutch cases involved cryptojacking rather than reported theft of wallet credentials. Attackers used the compromised Macs’ computing resources to mine Monero after obtaining root control. The NCSC has not disclosed the mining software, pool addresses, attacker wallets or resulting XMR proceeds.\nMonero has repeatedly appeared in cryptojacking campaigns because it can be mined using general-purpose computing hardware. As crypto.news previously reported, a Darktrace investigation found malware quietly deploying cryptocurrency mining software after attackers gained access to Windows systems.\nApple devices have also faced other crypto-related malware campaigns. In related coverage,North Korean hackers targeted macOS users with malware aimed at crypto companies using fake meetings and malicious software updates.\nMeanwhile, Monero (XMR) traded at around $414 at press time, indicating less the 1% increase in the past 24 hours and almost 5% in the past 7 days (according to crypto.news market data)\nMonero (XMR) price chart, source: crypto.news\nWhat happens next\nThe immediate priority is patching Macs running vulnerable versions of Sonoma, Sequoia and Tahoe. Systems exposed directly to the internet through Screen Sharing face the clearest documented risk, although Huntress recommends updating Macs even when administrators believe the service is disabled.\nThe Dutch NCSC has confirmed exploitation but has not attributed the campaign or published indicators identifying the Monero mining infrastructure. Further disclosures from incident responders could clarify how widespread the attacks became before Apple’s Aug. 6 fix.\n\n\n\n\n\n                Read more:\n            \n\n                Novig sues Wisconsin over sports prediction contracts","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"isLaohu8Offline":false,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.47.1","shortVersion":"4.47.1","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2660102945","isCrawlerRequest":true}