Well I guess I'm eating crow for suggesting MacOS was secure. JESUS lmfao, this one is nasty.
"Would Rust have solved this" oops, nope
Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner
https://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.html
14 Comments
Mongostein@lemmy.ca · 19 pts · 11d
Oh, it’s already been patched. Ok.
CanIFishHere@lemmy.ca · 16 pts · 11d
MacOs' greatest strength against malware was a small install base.
halezinflames@lemmus.org · 19 pts · 11d
Same with Linux
I'm really worried for the future if we don't get our shit together (AUR malware already proves what kind of damage these people can do)
eurodyne@piefed.world · 11 pts · 11d
As more and more people flee windows and seek alternatives, expect to see this sort of thing to increase.
halezinflames@lemmus.org · 10 pts · 11d
Especially now with AI agents discovering vulnerabilities at a pretty insane pace
eurodyne@piefed.world · 3 pts · 11d
Yeah, that too.
halezinflames@lemmus.org · 1 pts · 11d
It is really scary navigating, but I'm hoping being careful is still enough for most of what I do.
eurodyne@piefed.world · 2 pts · 11d
These sorts of attacks rely on a person finding themselves in a pretty shady situation already. You would have had to responded to some shady Web link or some shady email, and already clicked on a few shady links to get to the point where you were screen sharing with some bad actor somewhere. This exploit would have to be run on someone who was already pretty far down the rabbit hole.
If you’re pretty careful, you would never get started in the first place.
In fact, sometimes you will see these reports, and it turns out that these exploits exist only in a lab where they tested it, and haven’t been discovered in the real world
halezinflames@lemmus.org · 1 pts · 11d
Yeah hopefully you're right. Just a lot of scary reports all around compounded with threats I have already received personally.
Mondez@lemdro.id · 7 pts · 11d
Who in their right mind is exposing them directly to the internet? Poorly configured routers to blame here I assume?
LlilL@lemmy.zip · 1 pts · 10d
I haven’t seen full details on this yet but I’m curious how much of this is UPnP type situations. Routers have been doing much better with it being disabled by default compared to past however.
shortwavesurfer@lemmy.zip · -8 pts · 11d
Good for the Monero miner.
They can earn some money off of idiots.
neon_nova@lemmy.dbzer0.com · 4 pts · 10d
How are people idiots for screen sharing with zoom and getting hacked by something even Apple did not know about?
Romkslrqusz@lemmy.zip · 2 pts · 9d
It’s a bit more nuanced than that and most casual users likely are not vulnerable to this exploit:
Regardless, victim blaming is still lame