 (2).png){kind=logo}
5 hours ago
1
On August 6, Apple released macOS Tahoe 26.6.1, an update to the ‌macOS Tahoe‌ operating strategy that came retired past year. The update came a small implicit a week aft Apple released macOS Tahoe 26.6.
In its security enactment document, Apple said that the update addressed a vulnerability that could let an attacker to authenticate to Screen Sharing without valid credentials – successful short, a atrocious histrion could presumption a user's Mac surface and remotely instrumentality power of their keyboard and mouse. It appears nevertheless that hackers person already been taking vantage of the flaw.
As archetypal reported by ArsTechnica, the NCSC-NL said that it had been notified of maltreatment of the vulnerability, "observed connected aggregate systems connected which larboard 5900 was accessible from the internet." The crushed is that erstwhile surface sharing is enabled, macOS's firewall intentionally exposes this port.
"In each these cases, basal had been accessed connected the affected strategy and a Monero crypto miner had been placed," the NCSC-NL added. In different words, a targeted Mac's resources are utilized to excavation cryptocurrency.
When pushing the hole – which was besides included successful macOS Sonoma 14.8.9 and macOS Sequoia 15.7.9 – Apple said it had addressed the authentication contented with "improved authorities management." Users who person not updated their Macs should bash truthful arsenic soon arsenic possible. Even for those who person updated, usage of a VPN is besides recommended erstwhile surface sharing is active.
If you're not definite if your macOS mentation is up-to-date, you tin cheque by going into your Mac's System Settings and selecting General âžť Software Update.
This article, "Apple's macOS Screen Sharing Flaw Is Being Exploited successful the Wild" archetypal appeared connected MacRumors.com
Discuss this article successful our forums
English (US) ·