Apple News Articles

Apple just patched a critical macOS flaw that let hackers break in without a password

The Netherlands' National Cyber Security Centre (NCSC-NL) recently published an alarming security advisory about the new macOS flaw. It describes a vulnerability tied to an improper authentication...

5 days ago

macOS Screen Sharing Flaw (CVE-2026-65400) Actively Exploited for Crypto Mining

A vulnerability in macOS screen sharing (CVE-2026-65400) enables remote code execution without user interaction, allowing attackers to install Monero cryptocurrency miners on Apple systems. The flaw, stemming from improper input validation, has been actively exploited in enterprise environments. App...

6 days ago

Apple's Screen Sharing Flaw Opens Macs to Root Takeovers and Crypto Mining

A macOS Screen Sharing authentication bypass (CVE-2026-65400) lets attackers gain root without credentials. Apple patched it in August updates, but criminals already use it to install Monero miners on exposed systems. Enterprises must update immediately and lock down port 5900. The flaw's severity j...

6 days ago

Apple addresses multiple WebKit vulnerabilities | Computer Weekly

Apple’s latest security updates address a swathe of WebKit vulnerabilities, many of them apparently discovered using OpenAI tools.

6 days ago

Apple plugs image-processing hole ripe for spyware abuse

Patch batch spans current kit, older iGadgets, Macs, and Vision Pro

6 days ago

Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner

Apple's CVE-2026-65400 Screen Sharing flaw is under active exploitation on internet-exposed Macs to install a Monero miner.

1 week ago

Recent macOS Screen Sharing Vulnerability Exploited in Attacks

Threat actors are exploiting CVE-2026-65400, a macOS Screen Sharing vulnerability, to gain root access and install a Monero miner.

1 week ago

Vulnerability Giving Attackers Full Control of Macs Is Under Active Exploitation - Slashdot

joshuark shares a report from Ars Technica: Dutch officials have warned that a high-severity macOS vulnerability that allows attackers to execute malicious code is under active exploitation. "The NCSC has received a notification indicating that active abuse of this vulnerability has been observed on...

1 week ago

Macs Under Siege: Active Exploitation of Screen Sharing Flaw Hands Attackers Root Access

Dutch NCSC reports active exploitation of CVE-2026-65400 in macOS Screen Sharing. Attackers gain root access without credentials on exposed port 5900 systems and deploy Monero miners. Apple patched in August updates across Tahoe, Sequoia, and Sonoma. Organizations must act immediately to close this ...

1 week ago

macOS Screen Sharing Flaw Actively Exploited to Mine Monero: Patch Now

macOS Screen Sharing vulnerability CVE-2026-65400 is under active exploitation: the Dutch NCSC confirmed hackers obtained root access and planted Monero crypto miners on systems with port 5900

1 week ago

Vulnerability giving attackers full control of Macs is under active exploitation

Screen-sharing bug lets remote hackers log in without a password.

1 week ago

Apple Patches Mac Screen Sharing Flaw That Could Bypass Authentication - TechRepublic

Apple patched CVE-2026-65400 in macOS Tahoe, Sequoia, and Sonoma after a Screen Sharing flaw allowed authentication without valid credentials.

2 weeks ago

Apple Issues Single But Important Security Fix For Mac Screen Sharing

Apple has just issued a single but important security update for a Mac Screen Sharing bug. Here's what you need to know.

2 weeks ago

macOS Tahoe 26.6.1: 3 Essential Security Fixes - Techgenyz

macOS Tahoe 26.6.1 fixes CVE-2026-65400, closing Screen Sharing authentication flaw across Tahoe, Sequoia, and Sonoma Macs. Update now!

3 weeks ago

Apple Rushes macOS Patches Across Three Versions to Fix Screen Sharing Authentication Bypass

Apple issued urgent macOS updates for Tahoe, Sequoia, and Sonoma to fix a Screen Sharing flaw letting network attackers bypass credentials. CVE-2026-65400, credited to Bynario's Alfredo Pesoli, could enable remote screen viewing and control. No known exploitation, but the broad rollout signals serio...

3 weeks ago

Apple AI Bug Cap Blocked Critical macOS Screen Sharing Flaw Before Submission

Apple bug bounty AI reports face a new structural problem: the company’s submission cap — introduced to filter AI-generated vulnerability noise — blocked startup Bynario from reporting

3 weeks ago

Apple patches iOS bug that allowed the FBI to read Signal messages

Apple patches CVE-2026-28950: an iOS bug that caused deleted notifications to be retained, allowing the FBI to recover Signal messages.

Deleted Didn’t Mean Gone: Apple Fixes iPhone Bug Exploited in FBI Probe, Patches Notification Data Flaw in iOS 26.4.2

Apple has released iOS 26.4.2 and iPadOS 26.4.2 to fix a serious notification flaw (CVE-2026-28950) that allowed deleted message alerts to linger, exposing Signal messages in FBI investigations. Learn how this bug impacted privacy and why updating your device is critical.

iOS 26.4.2 Update Released, Apple Fixes Critical Notification Database Vulnerability | 📲 LatestLY

Apple has launched iOS 26.4.2 to fix a critical security flaw (CVE-2026-28950) that allowed deleted notifications to be stored permanently on iPhones. This vulnerability was reportedly used by the FBI to recover Signal message content. The iOS 26.4.2 update purges all improperly retained notificatio...

iOS 26.4.2 Update: What's New, Security Fixes, and Bug Improvements for iPhone

iOS 26.4.2 update brings Apple security fixes, notification retention patch, performance improvements, and critical iPhone bug fixes for better stability.

Apple fixes iPhone bug that let FBI retrieve deleted Signal messages(CVE-2026-28950) - IT Security News

Apple has rolled out security updates for iPhones and iPads that fix CVE-2026-28950, a logging issue in Notification Services that made devices unexpectedly retain notifications marked for deletion. The vulnerability was patched following a recent report about the FBI accessing…Read more →

Apple fixes iPhone bug that let FBI retrieve deleted Signal messages(CVE-2026-28950) - Help Net Security

Security updates for iPhones and iPads fix CVE-2026-28950, a vulnerability that made devices retain notifications marked for deletion.

Apple Patches iOS Flaw That Stored Deleted Signal Notifications in FBI Forensic Case - IT Security News

Apple has rolled out a software fix for iOS and iPadOS to address a Notification Services flaw that stored notifications marked for deletion on the device. The vulnerability, tracked as CVE-2026-28950 (CVSS score: N/A), has been described as a logging…Read more →

Apple Patches iOS Flaw That Stored Deleted Signal Notifications in FBI Forensic Case

Apple fixes CVE-2026-28950 in iOS 26.4.2 after deleted notifications were retained, mitigating forensic data exposure.

Coruna framework: an exploit kit and ties to Operation Triangulation

Kaspersky GReAT experts look into the Coruna exploit kit targeting iPhones. We discovered that the kernel exploit for CVE-2023-32434 and CVE-2023-38606 is an updated version of the Operation Triangulation exploit.