Serious Security Flaw Found in Apple Mac Computers

A serious security problem affecting Apple Mac computers is currently being used by hackers to take complete control of devices. According to Ars Technica, experts have discovered that this vulnerability is already being actively used in real-world attacks. The issue, which is officially tracked as CVE-2026-65400, allows unauthorized people to gain full access to a computer without needing a password.

This security flaw is located within the screen sharing feature of macOS. Screen sharing is a tool that allows a person to see another computer’s screen and control its keyboard and mouse from a distance. The problem happens because of a bug in how the system manages its current state, such as tracking user actions and other system activities. Because of this, an attacker can bypass security protections and take over the machine while it is turned on.

Officials from the Netherlands National Cyber Security Centrum (NCSC) issued a warning earlier this week regarding the situation. They reported that they have seen active abuse of this flaw on several systems that had port 5900 open to the internet. A port is a digital connection point that allows data to travel between computers. When these ports are left open, it makes it easier for attackers to reach the system. In every case the NCSC investigated, the attackers were able to gain 'root' access. Root access means having the highest level of control over a computer, allowing a user to change or delete anything on the system.

Once the attackers gained this high level of control, they installed a Monero crypto miner. A crypto miner is a type of software that uses the computer's power to create digital currency for the attacker. This process can make a computer run very slowly and use a large amount of electricity, often without the owner knowing that anything is wrong. The NCSC noted that these attacks were specifically targeting systems where the screen sharing feature was accessible from the public internet.

Details about this vulnerability were first shared publicly at the Black Hat security conference last week. This event brings together security experts from all over the world to discuss new threats and ways to protect technology. Following the disclosure, Apple released a patch—a small piece of software designed to fix a bug or security hole—for macOS Tahoe, Sequoia, and Sonoma. The company gave the vulnerability a severity rating of 7.1 out of 10, which indicates that it is a high-risk issue that users should take seriously.

In its official statement, Apple mentioned that the flaw 'may' allow an attacker without credentials to gain access to a Mac. While some experts noted that this language felt a bit soft, it is common for technology companies to use careful wording when they first talk about security problems. By using this language, companies often try to avoid causing unnecessary panic while they work to provide a solution for their customers.

This discovery follows a busy month for digital security news. Recently, other platforms have also been making changes to how they handle user data. For example, as reported in previous updates, Twitch users have gained new control over how their content is used for artificial intelligence training. While that issue focused on privacy, the current Mac vulnerability is a much more direct threat to the safety and operation of personal hardware.

To protect themselves, Mac users should ensure that their operating system is updated to the latest version provided by Apple. The patch released last week effectively closes the door on this specific attack method. Additionally, security experts suggest that users check their settings to ensure that screen sharing is turned off if they do not need to use it. Keeping ports closed and software updated are two of the most important steps that any computer user can take to prevent hackers from gaining control of their devices. As the digital world continues to change, staying informed about these updates remains the best way to keep personal information and hardware safe from harm.