Mac Hackers Secretly Mining Cryptocurrency, Warns Netherlands Cyber Security Centre

A critical flaw in macOS Screen Sharing has been exploited by hackers to gain full root access and secretly mine Monero on Macs.

The vulnerability, tracked as CVE-2026-65400, was patched by Apple on August 6, but attackers were already using it in the wild to install crypto miners on multiple internet-exposed Macs.

Attackers prefer Monero because it can be mined on ordinary CPUs and GPUs without specialized mining hardware, making almost any hacked device a potential target.