High-Severity macOS Vulnerability Exploited in Wild, Leading to Crypto Mining Attacks
Dutch cybersecurity authorities have issued a warning about active exploitation of a high-severity macOS vulnerability (CVE-2026-65400) that allows attackers to execute malicious code remotely. The Netherlands National Cyber Security Centrum (NCSC) reported that multiple systems with port 5900 exposed to the internet used for macOS screen sharing were compromised, granting attackers root access and deploying Monero cryptocurrency miners.
The flaw, rated 7.1/10 in severity, stems from a state management bug in macOS’s screen-sharing feature, which tracks user interactions and system states. Apple patched the vulnerability last week for macOS Tahoe, Sequoia, and Sonoma, though the company’s disclosure used cautious language, stating the bug "may" allow unauthorized access. Security firm Bynario was credited with reporting the issue, which was publicly detailed at Black Hat 2024.
Exploitation Details & Impact
- Attack Vector: Exploited via port 5900 (screen sharing), which macOS opens when the feature is enabled. Routers and firewalls typically block this port unless explicitly configured otherwise.
- Recommended Mitigations: Security experts advise disabling screen sharing when not in use, using VPNs or SSH tunneling for remote access, and installing Apple’s latest security updates.
- Real-World Case: A security-conscious user’s headless Mac Mini running only AI agents (Claude and Codex) was compromised. The attack was detected when Claude’s monitoring tool flagged unauthorized admin access, prompting an investigation that pinpointed the four-second window of exploitation. The user later used Claude to identify and remove the malware, rebuild defenses, and wipe the system.
Apple’s Security Model Under Scrutiny
The incident highlights tensions between Apple’s security controls and user flexibility, particularly for headless or agent-driven systems:
- Transparency, Consent, and Control (TCC): macOS’s permission system, which requires GUI-based approvals for actions like accessing network shares or cameras, creates friction for automated agents. Since prompts appear in a protected space inaccessible to software, agents often fail silently, forcing manual intervention.
- Automatic Updates: The user discovered that macOS’s "Install security updates automatically" setting does not apply to most CVE patches, which are typically delivered in point releases. This led to a delayed patch installation, increasing exposure.
- Full Disk Access (FDA) Restrictions: Apple recently announced plans to tighten FDA controls, citing risks from AI agents accessing sensitive data (e.g., messages, browsing history). While intended to protect users, the move could limit agent functionality for power users who rely on scripting and automation.
Broader Implications for AI Agents & macOS
- Agent Security: The incident underscores both risks and benefits of AI agents. While the user’s constrained agent detected and mitigated the breach, Apple’s restrictive permissions model may hinder future agent development.
- macOS as an Agent Host: Despite its Unix foundation and automation APIs, macOS’s GUI-dependent security prompts and increasingly iPhone-like restrictions clash with headless or agent-driven workflows.
- Future of Apple’s Ecosystem: The user expressed skepticism about Apple’s smart home ambitions (e.g., the upcoming J490 home hub), preferring open-source, self-controlled solutions over Apple’s walled-garden approach. The shift reflects a growing tension between Apple’s curated ecosystem and user-driven customization, particularly as AI agents democratize hacking and automation.
The vulnerability serves as a reminder of the trade-offs between security and usability, especially as AI agents and automation redefine how users interact with their devices. While Apple’s patches address the immediate threat, the incident raises questions about long-term compatibility between macOS’s security model and emerging agent-based computing.
Source: https://stratechery.com/2026/apple-and-a-hackers-future/
AppleInsider cybersecurity rating report: https://www.rankiteo.com/company/appleinsider
"id": "APP1791195841",
"linkid": "appleinsider",
"type": "Vulnerability",
"date": "9/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'location': 'Netherlands',
'type': 'Individual User / Headless Mac Mini'}],
'attack_vector': 'Remote Exploitation via Port 5900 (macOS Screen Sharing)',
'description': 'Dutch cybersecurity authorities have issued a warning about '
'active exploitation of a high-severity macOS vulnerability '
'(CVE-2026-65400) that allows attackers to execute malicious '
'code remotely. The flaw, rated 7.1/10 in severity, stems from '
'a state management bug in macOS’s screen-sharing feature, '
'which tracks user interactions and system states. Attackers '
'exploited port 5900 (screen sharing) to gain root access and '
'deploy Monero cryptocurrency miners.',
'impact': {'operational_impact': 'Unauthorized root access, deployment of '
'malware',
'systems_affected': 'macOS systems with port 5900 exposed to the '
'internet'},
'initial_access_broker': {'entry_point': 'Port 5900 (macOS Screen Sharing)'},
'lessons_learned': 'The incident highlights the trade-offs between Apple’s '
'security model and user flexibility, particularly for '
'headless or agent-driven systems. macOS’s GUI-dependent '
'security prompts and restrictive permissions can hinder '
'automation and AI agent functionality.',
'motivation': 'Cryptocurrency Mining (Monero)',
'post_incident_analysis': {'corrective_actions': ['Apple patched the '
'vulnerability for macOS '
'Tahoe, Sequoia, and Sonoma',
'User disabled screen '
'sharing and implemented '
'VPN/SSH tunneling',
'System wipe and malware '
'removal'],
'root_causes': ['State management bug in macOS’s '
'screen-sharing feature '
'(CVE-2026-65400)',
'Delayed patch installation due to '
'macOS’s automatic update '
'limitations',
'Exposure of port 5900 to the '
'internet']},
'recommendations': ['Disable screen sharing when not in use',
'Use VPNs or SSH tunneling for remote access',
'Install Apple’s latest security updates promptly',
'Monitor for unauthorized admin access',
'Consider open-source or self-controlled solutions for '
'automation and AI agents'],
'references': [{'source': 'Netherlands National Cyber Security Centrum '
'(NCSC)'},
{'source': 'Black Hat 2024 (Bynario)'},
{'source': 'Apple Security Update'}],
'response': {'containment_measures': 'Disabling screen sharing, using '
'VPNs/SSH tunneling, installing security '
'updates',
'enhanced_monitoring': 'Claude’s monitoring tool flagged '
'unauthorized admin access',
'recovery_measures': 'Claude AI agent assisted in identifying '
'and removing malware',
'remediation_measures': 'System wipe, malware removal, '
'rebuilding defenses'},
'title': 'High-Severity macOS Vulnerability Exploited in Wild, Leading to '
'Crypto Mining Attacks',
'type': 'Vulnerability Exploitation',
'vulnerability_exploited': 'CVE-2026-65400'}