Apple warns Netherlands users to update macOS after Screen Sharing vulnerability exploited

A serious vulnerability in Apple’s macOS Screen Sharing tool has been exploited in the wild, prompting urgent updates for users. Reports indicate that the flaw has been utilized by attackers in the Netherlands, where they gained unauthorized access to multiple systems. This security issue was initially addressed by Apple a few weeks ago when it released patches to prevent potential exploitation, but it has now become a real threat.

The vulnerability allows attackers to view users' screens, open files, and control the affected computers as if they had physical access. Dutch officials from the Netherlands National Cyber Security Centrum have confirmed that they received reports of attackers gaining root access to systems and uploading crypto mining software. The flaw, identified as CVE-2026-65400, can be exploited by anyone on the same network if Screen Sharing is enabled, allowing login without needing a password.

Apple has already provided software updates to fix the issue, which affects the macOS versions Tahoe, Sequoia, and Sonoma. Users are strongly urged to install these updates immediately. In addition to updating their systems, users can enhance their security by disabling the Screen Sharing tool in the System Settings menu. Experts also recommend keeping port 5900, which is used for Screen Sharing, closed to prevent unauthorized access over the internet.

This vulnerability is part of a broader trend of security issues related to screen-sharing applications, as evidenced by a similar bug recently reported in Zoom. The rapid emergence of these vulnerabilities highlights the importance of regular software updates and vigilant security practices to protect personal and sensitive information from cyber threats.