EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·7d ago·5 min read
Apple and a Hacker's Future
TL;DR
A high-severity macOS vulnerability, CVE-2026-65400, allows attackers to execute malicious code remotely, leading to unauthorized access and the installation of a Monero crypto miner. Apple has released a patch to address this issue, which was actively exploited before the fix.
✦ Why It Matters
Update your macOS immediately to protect against this critical vulnerability.
Key Takeaways
- Ensure your macOS is updated to the latest version.
- Monitor network ports for unauthorized access attempts.
- Consider disabling screen sharing if not in use.
- Stay informed about security vulnerabilities and patches.
Full Summary
CVE-2026-65400 is a critical vulnerability in macOS that affects the screen sharing feature, enabling attackers to remotely control a Mac without credentials. The flaw, rated 7.1 out of 10 in severity, is linked to issues in state management, which tracks user interactions and system events.
Dutch officials reported that this vulnerability was actively exploited, with attackers gaining root access and deploying a Monero crypto miner on compromised systems. Apple issued a patch for macOS Tahoe, Sequoia, and Sonoma to mitigate this risk.
The vulnerability was disclosed at the Black Hat security conference, highlighting the importance of timely updates. Security firm Bynario was credited for identifying the issue, emphasizing the need for vigilance in software security.