MacOS flaw exploited for root access

A high-severity macOS vulnerability, CVE-2026-65400, is under active exploitation, allowing attackers to execute malicious code. The Netherlands National Cyber Security Centrum observed root access gained and a Monero crypto miner installed on systems with port 5900 accessible from the Internet.