Mac Flaw Exposes Users to Unauthorized Monero Mining Attacks

A critical macOS vulnerability tracked as CVE-2026-65400 has exposed Apple devices to unauthorized exploitation and Monero mining attacks. The flaw, which carries a CVSS severity rating of 9.8, allows attackers to bypass authentication and gain administrative access through the vulnerable desktop environment.

Attackers can use this elevated access to deploy malware, including cryptojacking software that installs stealthy Monero mining scripts. These rogue operations consume hardware resources while running in the background as system processes.

The exploit targets systems with port 5900 directly exposed to the internet and can be detected by automated scanning tools within minutes across a global network range. Cybercriminals are opting for Monero due to its suitability for common desktop CPUs, including Apple Silicon and modern x86 architectures.