Vulnerability giving attackers full control of Macs is under active exploitation. Dutch officials have warned that a high-severity macOS vulnerability that allows attackers to execute malicious code is under active exploitation. “The NCSC has received a notification indicating that active abuse of this vulnerability has been observed on multiple systems on which port 5900 was accessible from the Internet,” the Netherlands National Cyber Security Centrum warned earlier this week. “In all these cases, root had been accessed on the affected system and a Monero crypto miner….
arstechnica.com reported on a vulnerability with documented exploitation in production environments. The vulnerability affects systems that run the affected software version. Unpatched systems remain exposed to remote code execution or privilege escalation, depending on the specific CVE. The attack vector determines which systems are reachable.
Source: arstechnica.com