Vulnerability giving attackers full control of Macs is under active exploitation
A newly disclosed Mac vulnerability allows remote attackers to gain full system access without a password, and it is already being exploited in the wild.
- The vulnerability enables remote attackers to gain full system access to Macs without authentication via screen-sharing services.
- Exploit attempts are already active in the wild, indicating real-world risk for unpatched devices.
- Apple has not yet issued a patch, leaving users vulnerable to potential data theft or malware deployment.
- The flaw affects default macOS configurations where screen-sharing is enabled.
Security researchers have identified a critical vulnerability in macOS that permits remote attackers to bypass authentication and gain full control of affected Macs. The flaw, tracked in active exploitation, allows unauthorized users to remotely log in via screen-sharing services without requiring a password. Apple has not yet released a patch, leaving millions of users potentially exposed to attacks that could lead to data theft, malware installation, or complete system compromise.
The vulnerability specifically targets the macOS screen-sharing feature, which is enabled by default in many configurations. Attackers can exploit this to execute arbitrary commands with system-level privileges, effectively turning compromised devices into botnet nodes or entry points for further network infiltration. Security firms have observed exploit attempts in the wild, suggesting this is not just a theoretical risk but an immediate threat to unpatched systems.
Developers should audit macOS applications using screen-sharing APIs and prepare for potential security updates.
Companies relying on Macs must prioritize patching or disabling screen-sharing to prevent unauthorized access.
Users are advised to disable screen-sharing and monitor for unusual remote login activity.
- screen-sharing
- A macOS feature allowing remote access to a computer's display and input devices.
- authentication bypass
- A security flaw that allows unauthorized access without valid credentials.
Healthcare's Rush to Adopt Artificial Intelligence Is Outpacing Its Data Security, Says Healthcare Engineering Expert Urvish Gajjar - ACCESS Newswire
SecuritySuspecting court of using AI, man injected prompts in filings to try to win case
SecurityPBS station fears losing 50TB of data after being ghosted by cloud storage provider
SecurityThe Safety Reckoning Inside OpenAI
SecurityPrivate security firms will soon be allowed to hack overseas cybercriminals
Like it or not, AI psycho-oncology care is already happening. Urgently needed: An ethical framework Developers and mental health providers must share the same goal: Safe, equitable, trustworthy, and patient-centered care - cancerletter.com
AI-driven psycho-oncology tools are already being used in cancer care, but experts warn of a critical lack of ethical frameworks to ensure safety and equity.
AI eyes in the sky: New satellites and artificial intelligence are transforming wildfire detection - AccuWeather
New AI-powered satellite systems are enabling faster and more accurate wildfire detection, improving response times and reducing environmental damage.
AI Tools59% of Dogs Are Obese and Their Owners Don't Know. So I Built an AI That Tells Them.
A developer has created an AI-powered tool called PawWise that uses Google AI to analyze a dog's health from a photo and provide owners with insights.
Senate Judiciary Hearing Reveals Bipartisan Support for Federal Action on AI-Driven “Surveillance Pricing” - consumerfinancemonitor.com
A Senate Judiciary hearing has shown bipartisan support for federal action on AI-driven surveillance pricing. This indicates a potential regulatory shift in how AI is used in pricing strategies.
Heavy AI Users Report Greater Gains in Advisory Practices - planadviser.com
A new study reveals that financial advisory firms using AI tools extensively report significantly higher productivity gains than their peers.
HardwareFirst test flight of largest all-electric aircraft used just $5 of electricity
The largest all-electric aircraft ever flown completed its first test flight using just $5 worth of electricity, marking a milestone for sustainable aviation.