Apple patched CVE-2026-65400 after attackers exploited Mac Screen Sharing services to install Monero miners remotely.Dutch cybersecurity officials confirmed compromised Macs had root access and unauthorized Monero mining software installed.CISA now scores the authentication flaw 9.8 critical, up from its earlier 7.1 assessment overall.Huntress found tens of thousands of potentially exposed Macs, especially internet-hosted bare-metal Apple systems worldwide.Changing Screen Sharing passwords cannot fix the flaw; affected Macs require Apple security updates immediately.