Parabolic AirdropParabolicAirdrop
Back to News
News

Hackers Exploit macOS Screen Sharing Flaw to Mine Monero

August 25, 2026via Dutch NCSC
Hackers Exploit macOS Screen Sharing Flaw to Mine Monero

Hackers are actively exploiting a critical vulnerability in macOS Screen Sharing to install Monero mining malware. Dutch cybersecurity officials have confirmed the flaw, which allows attackers to take remote control of a Mac without any user interaction. U.S. officials rated the vulnerability 9.8 out of 10 on the CVSS severity scale, placing it in the critical category. The exploit gives attackers full remote access, which they are using to silently deploy XMRig, the most common open-source Monero miner, in the background. Affected users typically see no visible symptoms beyond slightly elevated CPU usage. The malware runs persistently and uses the compromised machine's processing power to mine Monero for the attacker, often for days or weeks before detection. macOS users are urged to update their devices immediately. To check your current version, go to Apple menu, then System Settings, then General, then Software Update.