macOS Screen Sharing Flaw CVE-2026-65400 Lets Attackers Gain Root, Install Crypto Miner

·2 views

A critical authentication bypass vulnerability, CVE-2026-65400, has been discovered in macOS Screen Sharing, affecting macOS Tahoe before 26.6.1, Sequoia before 15.7.9, and Sonoma before 14.8.9. Attackers can connect remotely via TCP port 5900 and exploit an authentication state management flaw to establish a session without valid credentials, requiring no user interaction. In multiple incidents reported to NCSC-NL, threat actors leveraged this access to gain root privileges and install a Monero cryptocurrency miner. Apple has released patched versions of all three affected macOS branches to address the vulnerability. Users and administrators are advised to apply updates immediately, disable unnecessary Screen Sharing, and block TCP/5900 from public internet access.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Why the 'cheapest' AI model may cost more depending on your workload

Choosing the most cost-effective AI model depends not on leaderboard rankings but on the ratio of input to output tokens a specific workload generates. Models price input and output tokens differently, and that gap varies significantly — for example, Grok 4.3 charges only twice as much for output as input, while others charge five to six times more. A document classification task heavily skewed toward input tokens favors Claude Haiku 4.5 by 17%, whereas a code generation task with far more output tokens makes Grok 4.3 42% cheaper. Reliability also affects true cost: a model with a 20% failure rate that reroutes failed calls to a pricier fallback can erase its apparent savings entirely. Developers are advised to measure their own token ratios across real requests before comparing model prices.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Voice-Based Finance Tutor After Losing Money on a ₹6 Share Trade

A developer built FinEd Saathi, a voice-first financial literacy tutor, after personally losing around ₹50 on a ₹6 share trade due to a poor understanding of brokerage fees and taxes. The project was created in 10 days as part of the VoiceForBharat Edition hackathon under the Financial Services track. FinEd Saathi is designed for Indian market beginners and can explain topics such as stocks, mutual funds, ETFs, IPOs, and bonds through patient, conversational voice lessons. The app supports English, Hindi, and code-mixed speech using Deepgram Nova-3 for transcription, Gemini for teaching logic, LiveKit for real-time audio, and Murf Falcon 2 for low-latency text-to-speech. The project aims to bridge the gap between access to financial information and genuine understanding before users risk real money.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How Data Types Control Memory, Meaning, and Math in Programming

Data types are fundamental instructions that tell a computer how to interpret binary data, how much memory to allocate, and which operations are valid for a given value. Without a data type, the same sequence of bits — such as 01000001 — could mean the integer 65 or the character 'A' depending on context. Java defines eight primitive types, ranging from 8-bit bytes to 64-bit doubles, each suited for different kinds of values and memory requirements. Choosing the wrong integer type can lead to overflow bugs, as seen when adding 1 to Java's maximum integer value wraps around to the most negative number. Floating-point types like float and double use the IEEE 754 standard to represent decimals across a wide range, but introduce precision trade-offs that programmers must account for.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Game Developer Shares Passion for Unity, Godot, and Indie Game Design

A game developer has introduced themselves on DEV Community, highlighting their work across Unity, Godot, and C++ for performance-focused projects. They describe their approach as iterative and prototype-driven, focusing on refining systems that prove effective. Their areas of deep interest include shaders, procedural generation, and the nuanced quality known as 'game feel.' Outside of building games, they actively play indie titles and study the design decisions behind them. They expressed openness to connecting with others in the game development community to discuss tools, engines, and mechanics.

0 comments Read more at DEV Community