decrypt.co
Hackers Are Abusing a macOS Screen Sharing Flaw to Secretly Mine Monero
The Netherlands' NCSC warned of active exploitation of a macOS Screen Sharing vulnerability across systems with port 5900 exposed to the internet, where attackers gained root access and installed Monero mining programs.