Apple fixes macOS screen sharing vulnerability, attackers exploit this vulnerability to plant cryptocurrency mining program

Fraudsters impersonating regulators and licensed crypto exchanges to steal funds from users forced to migrate their accounts after the EU's MiCA deadline are on the rise.

US President Trump is considering imposing stricter economic pressure on Iran, including sanctions on Chinese buyers of Iranian oil, banks, and other entities assisting Tehran in evading restrictions. （Cointelegraph）

According to on chain analyst Ai Yi's monitoring, addresses 0x333... 29cd2 cleared 5.12 million tokens for $0.00006885 two days before the MarsCoin surge, resulting in a loss of $4533. At current prices, this portion is worth $171000. The address chased up $2308 worth of tokens 55 minutes ago, although it gained a floating profit, the overall capital has not been recovered yet.

According to The Hacker News, the National Network Security Center of the Netherlands (NCSC) warned that the serious authentication vulnerability CVE-2026-65400 in Apple's macOS screen sharing component had been exploited in the wild. An attacker could access a Mac exposed to the Internet and plant a coin mining program without credentials. Apple fixed this vulnerability on August 6th with updates for macOS Tahoe 26.6.1, Sequoia 15.7.9, and Sonoma 14.8.9. NCSC confirms that the attacker has obtained root privileges and deployed mining software.

According to Cointelegraph, the anonymous founder of DeFiLlama, 0xngmi, stated that the team has postponed the official mobile app release due to the long-term existence of phishing apps impersonating the platform on the Apple App Store. The team reported the malicious application to Apple for several months without success, and Apple only took it down after recording the process of the application stealing funds. 0xngmi has decided to release the official application only after all counterfeit applications have been removed to avoid users being deceived. There were fake apps on the App Store that impersonated Rabby Wallet and Curve Finance. In November 2023, a counterfeit Ledger Live app on the Microsoft Store resulted in 38 transactions totaling $588000 being stolen.