Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

PoC for a critical vulnerability in Apple macOS Screen Sharing (CVE-2026-65400). If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password. We reverse engineered Apple’s unusual macOS 26.6.1 patch to understand the root cause and exploitation path.... show more

Calif

6,271 subscribers

330,739 views • 1 day ago •via X (Twitter)

Science & Technology Education News & Politics

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

🚨 We're disclosing a macOS security bug that Apple says is not an issue. Using a simple archive-and-restore trick, an attacker can silently replace the main executable of virtually any application downloaded from the web—no password or warning is required. Here's a demo using Signal to steal its encryption key. 📝 Blog with technical details: link in the replies. Do you think this should be considered a security bug? 🎬👇

🚨 We're disclosing a macOS security bug that Apple says is not an issue. Using a simple archive-and-restore trick, an attacker can silently replace the main executable of virtually any application downloaded from the web—no password or warning is required. Here's a demo using Signal to steal its encryption key. 📝 Blog with technical details: link in the replies. Do you think this should be considered a security bug? 🎬👇

Mysk 🇨🇦🇩🇪

86,835 views • 16 days ago

You can't build iOS apps without a Mac, so we gave Devin one. Devin Cloud Agents now run macOS, with Xcode, iOS simulator, and your signing setup, all in a real macOS environment (with full computer use). In this demo, Devin builds a native iOS game, then plays and tests it with computer use. Devin then sends a screen recording of the gameplay along with a test report for my review. With Namespace you get as many macOS environments as you'd like, configurable with many major versions of macOS operating system and Xcode.

You can't build iOS apps without a Mac, so we gave Devin one. Devin Cloud Agents now run macOS, with Xcode, iOS simulator, and your signing setup, all in a real macOS environment (with full computer use). In this demo, Devin builds a native iOS game, then plays and tests it with computer use. Devin then sends a screen recording of the gameplay along with a test report for my review. With Namespace you get as many macOS environments as you'd like, configurable with many major versions of macOS operating system and Xcode.

nader dabit

288,581 views • 9 days ago

🚨PSA: If you think you're a targeted individual, don't install macOS apps from the web. macOS code signing and TCC are broken. We accidentally found a bug that lets any command modify the binaries of other apps, including Signal, Brave, Chrome, and even Xcode. Watch the demo👇 This happens entirely in the background, with no password prompts or visible alerts. The modified binaries can then access the original app's keychain records and protected containers. We reported this to Apple two weeks ago and haven't received a response. We previously said we wouldn't contact Apple's bounty program again, but we believe it's necessary in this case to help protect Mac users. It affects macOS 26 and 27. This bug doesn't impact apps downloaded from the Mac App Store. Many developers distribute apps on the web instead because Apple controls the App Store's review process and payment methods.

🚨PSA: If you think you're a targeted individual, don't install macOS apps from the web. macOS code signing and TCC are broken. We accidentally found a bug that lets any command modify the binaries of other apps, including Signal, Brave, Chrome, and even Xcode. Watch the demo👇 This happens entirely in the background, with no password prompts or visible alerts. The modified binaries can then access the original app's keychain records and protected containers. We reported this to Apple two weeks ago and haven't received a response. We previously said we wouldn't contact Apple's bounty program again, but we believe it's necessary in this case to help protect Mac users. It affects macOS 26 and 27. This bug doesn't impact apps downloaded from the Mac App Store. Many developers distribute apps on the web instead because Apple controls the App Store's review process and payment methods.

Mysk 🇨🇦🇩🇪

137,032 views • 1 month ago

Here goes nginx-quicburst (CVE-2026-42530), a new RCE in Nginx discovered by our security agent VEGA and demonstrated by Nebula Security. This is only the third NGINX vulnerability since 2014 to receive NGINX’s “major” severity rating. If you use Nginx 1.31 with QUIC enabled, we recommend upgrading to the latest version. This bug has been patched in the latest Nginx release. We will publish the technical writeup, including the ASLR bypass, on July 18 together with the previous nginx-poolslip writeup.

Here goes nginx-quicburst (CVE-2026-42530), a new RCE in Nginx discovered by our security agent VEGA and demonstrated by Nebula Security. This is only the third NGINX vulnerability since 2014 to receive NGINX’s “major” severity rating. If you use Nginx 1.31 with QUIC enabled, we recommend upgrading to the latest version. This bug has been patched in the latest Nginx release. We will publish the technical writeup, including the ASLR bypass, on July 18 together with the previous nginx-poolslip writeup.

Nebula Security

103,150 views • 1 month ago

Posture Pal is available for macOS Sonoma today! Improve your work posture by wearing your AirPods. While you're working, Rafi and friends are keeping an eye on your posture by using the motion sensors in your AirPods. When you start slouching, they will appear from the bottom of your screen for a fun yet very effective warning! A macOS version was the number one requested feature since the iOS app became App of the Month in China back in April 2022. Now in macOS Sonoma Apple added the necessary APIs 🙂 It's available for free from the Mac App Store, and you can unlock all characters (as well as all pro features for the iOS version) for a one time purchase of $4.99!

Posture Pal is available for macOS Sonoma today! Improve your work posture by wearing your AirPods. While you're working, Rafi and friends are keeping an eye on your posture by using the motion sensors in your AirPods. When you start slouching, they will appear from the bottom of your screen for a fun yet very effective warning! A macOS version was the number one requested feature since the iOS app became App of the Month in China back in April 2022. Now in macOS Sonoma Apple added the necessary APIs 🙂 It's available for free from the Mac App Store, and you can unlock all characters (as well as all pro features for the iOS version) for a one time purchase of $4.99!

Jordi Bruin

295,145 views • 2 years ago

Devin Cloud Agents can now build and ship a real macOS release end-to-end, all in a real Mac environment (with full computer use). In this demo, the agent builds a native SwiftUI app, code-signs it, notarizes with Apple via notarytool, staples the ticket, and packages a signed DMG with the classic drag-to-Applications window. With computer use, it installs its own app like a real user: mount, drag, eject, launch with zero Gatekeeper warnings. It even verified notifications fired by checking the macOS notification database on screen, with a full recording and release report delivered for review. This entire workflow now takes about 60 seconds to spin up and tear down with Devin and Namespace. You can choose multiple versions of macOS of Xcode for your environment!

Devin Cloud Agents can now build and ship a real macOS release end-to-end, all in a real Mac environment (with full computer use). In this demo, the agent builds a native SwiftUI app, code-signs it, notarizes with Apple via notarytool, staples the ticket, and packages a signed DMG with the classic drag-to-Applications window. With computer use, it installs its own app like a real user: mount, drag, eject, launch with zero Gatekeeper warnings. It even verified notifications fired by checking the macOS notification database on screen, with a full recording and release report delivered for review. This entire workflow now takes about 60 seconds to spin up and tear down with Devin and Namespace. You can choose multiple versions of macOS of Xcode for your environment!

nader dabit

138,791 views • 3 days ago

I'm using macOS for more than 14 years now, in a single laptop screen setup with lots of windows open, and I'm using macOS spaces everyday to organize my windows. Switching between spaces is easy: I hit CTRL+arrow left/right, it takes no time. What takes time however, is this macOS-native transition animation that takes a bit less than 1 second, for every single space switch. I've checked everywhere in macOS settings, asked friends with the same problem, and there's just no setting to disable this effect (even with Reduced Motion ON in Accessibility settings). This UX choice from Apple alone costs me days of my time every year, as I'm working non-stop on my SaaS business for 10h a day 5-6 days a week (Crisp for those who know about it!). I calculated that with my daily use of macOS spaces, in 6 months I'd perform 100,000 switches, which costs me the same in seconds waiting for the transition to complete. This represents almost 28 hours waiting. In 1 year, I'd have lost 2.4 days just... waiting! The Hack Fortunately, some other open-source projects discovered a hack not so long ago, which allows disabling the transition when switching spaces: it involves sending to the system a "fake" trackpad left/right swipe gesture that's faster than what's expected (faster than what a human can input via the Macbook's trackpad). Above some threshold, macOS just perform the space switch with absolutely no transition. A friend of mine, Yaël 🛸, made a quick prototype in Objective-C, and it magically worked! The Solution So, I asked my friend if we could make it a proper macOS app together, in a beautiful minimalist package, and he said yes! So, we launched Space Rabbit, a tiny 2MB fully native macOS app, that allows you to optimize macOS spaces for productivity! Space Rabbit is a full rewrite of the initial prototype in modern Swift, with a tray menu bar to configure the app, and a settings window, in a macOS app packaging. Space Rabbit can be downloaded right here: We just released V2 of the app last week, fixing a ton of little bugs, especially for dual screen setups. It's actively maintained to this day as it's my daily driver. The app is open-source: and will always be free, as it's helping improve our productivity in our daily Web Dev tasks for our main businesses. We'll be happy to implement more features from user requests, if you find this app useful and use it daily!

I'm using macOS for more than 14 years now, in a single laptop screen setup with lots of windows open, and I'm using macOS spaces everyday to organize my windows. Switching between spaces is easy: I hit CTRL+arrow left/right, it takes no time. What takes time however, is this macOS-native transition animation that takes a bit less than 1 second, for every single space switch. I've checked everywhere in macOS settings, asked friends with the same problem, and there's just no setting to disable this effect (even with Reduced Motion ON in Accessibility settings). This UX choice from Apple alone costs me days of my time every year, as I'm working non-stop on my SaaS business for 10h a day 5-6 days a week (Crisp for those who know about it!). I calculated that with my daily use of macOS spaces, in 6 months I'd perform 100,000 switches, which costs me the same in seconds waiting for the transition to complete. This represents almost 28 hours waiting. In 1 year, I'd have lost 2.4 days just... waiting! The Hack Fortunately, some other open-source projects discovered a hack not so long ago, which allows disabling the transition when switching spaces: it involves sending to the system a "fake" trackpad left/right swipe gesture that's faster than what's expected (faster than what a human can input via the Macbook's trackpad). Above some threshold, macOS just perform the space switch with absolutely no transition. A friend of mine, Yaël 🛸, made a quick prototype in Objective-C, and it magically worked! The Solution So, I asked my friend if we could make it a proper macOS app together, in a beautiful minimalist package, and he said yes! So, we launched Space Rabbit, a tiny 2MB fully native macOS app, that allows you to optimize macOS spaces for productivity! Space Rabbit is a full rewrite of the initial prototype in modern Swift, with a tray menu bar to configure the app, and a settings window, in a macOS app packaging. Space Rabbit can be downloaded right here: We just released V2 of the app last week, fixing a ton of little bugs, especially for dual screen setups. It's actively maintained to this day as it's my daily driver. The app is open-source: and will always be free, as it's helping improve our productivity in our daily Web Dev tasks for our main businesses. We'll be happy to implement more features from user requests, if you find this app useful and use it daily!

Valerian Saliou

195,657 views • 4 days ago

Signal Desktop is not secure. With every vulnerability we discover on macOS, we find Signal Desktop to be an easy target. In this video, we show how a Signal session can be stolen and restored on a remote Mac without the user being aware. Only use Signal on iPhone or Android

Signal Desktop is not secure. With every vulnerability we discover on macOS, we find Signal Desktop to be an easy target. In this video, we show how a Signal session can be stolen and restored on a remote Mac without the user being aware. Only use Signal on iPhone or Android

Mysk 🇨🇦🇩🇪

36,948 views • 2 months ago

Because of a bug in Android 8.0, it is possible to bypass lock-screen timeout and disable Android PIN/Password/Pattern using ADB commands In the video, I automatically tested 26 different PINs in a row without 30 seconds timeout being triggered. As a result, PIN was found and lock-screen protection removed. This bug was fixed in Android 8.1 and above OS versions. This method can be used only on devices with enabled debugging. More info:

Because of a bug in Android 8.0, it is possible to bypass lock-screen timeout and disable Android PIN/Password/Pattern using ADB commands In the video, I automatically tested 26 different PINs in a row without 30 seconds timeout being triggered. As a result, PIN was found and lock-screen protection removed. This bug was fixed in Android 8.1 and above OS versions. This method can be used only on devices with enabled debugging. More info:

Mobile Hacker

118,663 views • 2 years ago

Can a micro account make a dent in the X timeline and have a chance to compete for the $1M prize? 👀 Here's my submission for the Grok Ad, made for the BIG SCREEN in Ultra HD🔥 Sound UP! 🔊 If on mobile, be sure to tap in to open the video, and rotate your phone for largest view. ❤️If you like it, please help me get some reach by sharing it with others. Thank you!

Can a micro account make a dent in the X timeline and have a chance to compete for the $1M prize? 👀 Here's my submission for the Grok Ad, made for the BIG SCREEN in Ultra HD🔥 Sound UP! 🔊 If on mobile, be sure to tap in to open the video, and rotate your phone for largest view. ❤️If you like it, please help me get some reach by sharing it with others. Thank you!

M

15,692 views • 6 months ago

Imagine an AI application that can type anywhere you can and use the full context of what's on your screen. This is the application we all deserve (at least if you have macOS.) Check out Omnipilot. It's an app that works with every other macOS application and uses Claude Sonet 3.5 in the background—it also supports Gemini and GPT-4o. Here is the idea: You can use the tool to ask questions about anything on your screen. Or you can use it to autocomplete the text you are typing. You don't need to copy and paste anymore or waste your time providing context to a model. It sees what you see. It works right where you are. That's pretty cool. Here are a couple of cool examples: • Use it to reply to an email • Use it in the terminal to autocomplete a command • Use it to finish a document • Use to send a message on Slack AI at the system level is bonkers. You can read a ton more on their Product Hunt launch page: Thanks to the Omnipilot team for collaborating with me on this post!

Imagine an AI application that can type anywhere you can and use the full context of what's on your screen. This is the application we all deserve (at least if you have macOS.) Check out Omnipilot. It's an app that works with every other macOS application and uses Claude Sonet 3.5 in the background—it also supports Gemini and GPT-4o. Here is the idea: You can use the tool to ask questions about anything on your screen. Or you can use it to autocomplete the text you are typing. You don't need to copy and paste anymore or waste your time providing context to a model. It sees what you see. It works right where you are. That's pretty cool. Here are a couple of cool examples: • Use it to reply to an email • Use it in the terminal to autocomplete a command • Use it to finish a document • Use to send a message on Slack AI at the system level is bonkers. You can read a ton more on their Product Hunt launch page: Thanks to the Omnipilot team for collaborating with me on this post!

Santiago

72,306 views • 2 years ago

Today, the online evidence submission for the Rape Gang Inquiry went live. If you have any information or evidence about child exploitation, please get in touch. We recognise that this could be a difficult process for survivors and families, so if I can help in any way, please contact me. We will do our best to offer support in any way we can. Thank you to all for supporting and donating.

Sensitive content

Today, the online evidence submission for the Rape Gang Inquiry went live. If you have any information or evidence about child exploitation, please get in touch. We recognise that this could be a difficult process for survivors and families, so if I can help in any way, please contact me. We will do our best to offer support in any way we can. Thank you to all for supporting and donating.

Sammy Woodhouse

77,921 views • 1 year ago

This is dope update for Gemini macOS app 🔥 You can now long press the Fn key and simply talk to Gemini from anywhere on your Mac. By default, it works as an intelligent dictation tool that: - Removes "ums" and "ahs" - Cleans up mid sentence corrections - Formats your text automatically - Pastes polished text directly where your cursor is Enable Gemini Reasoning, and it can do even more by understanding what's on your screen. For example, you can: - Summarize documents, PDFs, and images - Rewrite highlighted text in any tone - Turn notes into polished emails or executive summaries - Generate and edit images using voice commands Instead of switching between apps, you can just speak naturally and Gemini handles the rest. This update is rolling out globally in English for the Gemini app on macOS, with more languages coming soon. Video credit: Google Blog

This is dope update for Gemini macOS app 🔥 You can now long press the Fn key and simply talk to Gemini from anywhere on your Mac. By default, it works as an intelligent dictation tool that: - Removes "ums" and "ahs" - Cleans up mid sentence corrections - Formats your text automatically - Pastes polished text directly where your cursor is Enable Gemini Reasoning, and it can do even more by understanding what's on your screen. For example, you can: - Summarize documents, PDFs, and images - Rewrite highlighted text in any tone - Turn notes into polished emails or executive summaries - Generate and edit images using voice commands Instead of switching between apps, you can just speak naturally and Gemini handles the rest. This update is rolling out globally in English for the Gemini app on macOS, with more languages coming soon. Video credit: Google Blog

AshutoshShrivastava

14,630 views • 9 days ago

CALL FOR PARTNERSHIP Dear Beloved, We thank GOD for each of you and for the many ways you have supported the journey of The Ark of Preservation. Your prayers, encouragement, and generosity over the years have been a gift to this work. May the LORD remember you for good, in JESUS’ name. At this stage of the assignment, we have a few needs before us as we strengthen the infrastructure of the ministry. These include: Backup Solar Generator Screen If The LORD lays it in your heart to give towards any of these, you are welcome to do so using the account details below. Please feel no pressure partner only as you are led and enabled. ACCOUNT DETAILS (DOLLAR ACCOUNT) Bank Name: Access Bank PLC Account Number: 1488352951 Account Name: His Worship Christian Network ACCOUNT DETAILS (NAIRA ACCOUNT) Bank Name: Access Bank PLC Account Number: 1395512505 Account Name: His Worship Christian Network We deeply appreciate your continued love and prayers. The LORD bless you abundantly. HWCN GLOBAL

CALL FOR PARTNERSHIP Dear Beloved, We thank GOD for each of you and for the many ways you have supported the journey of The Ark of Preservation. Your prayers, encouragement, and generosity over the years have been a gift to this work. May the LORD remember you for good, in JESUS’ name. At this stage of the assignment, we have a few needs before us as we strengthen the infrastructure of the ministry. These include: Backup Solar Generator Screen If The LORD lays it in your heart to give towards any of these, you are welcome to do so using the account details below. Please feel no pressure partner only as you are led and enabled. ACCOUNT DETAILS (DOLLAR ACCOUNT) Bank Name: Access Bank PLC Account Number: 1488352951 Account Name: His Worship Christian Network ACCOUNT DETAILS (NAIRA ACCOUNT) Bank Name: Access Bank PLC Account Number: 1395512505 Account Name: His Worship Christian Network We deeply appreciate your continued love and prayers. The LORD bless you abundantly. HWCN GLOBAL

ToluwalogoAgboola

15,164 views • 8 months ago

Vysor kept annoying me with ads and paywalls just to mirror my Android screen, so I built my own. Introducing Another: a free, open-source app for mirroring and controlling your Android phone from your desktop. The thing is insanely fast. Near-zero latency screen mirroring over USB. It feels like your phone screen is native to your computer. No lag, no frame drops, just raw performance. 🚀 Built with Tauri, React, and Rust. Uses scrcpy under the hood, which streams your phone's display as raw H.264 over ADB. No cloud, no relay servers, everything stays local. macOS available now. Windows and Linux experimental.

Vysor kept annoying me with ads and paywalls just to mirror my Android screen, so I built my own. Introducing Another: a free, open-source app for mirroring and controlling your Android phone from your desktop. The thing is insanely fast. Near-zero latency screen mirroring over USB. It feels like your phone screen is native to your computer. No lag, no frame drops, just raw performance. 🚀 Built with Tauri, React, and Rust. Uses scrcpy under the hood, which streams your phone's display as raw H.264 over ADB. No cloud, no relay servers, everything stays local. macOS available now. Windows and Linux experimental.

Chizi

92,404 views • 4 months ago

Chat GPT was hacked😵‍💫👀😱🚨🚨The vulnerability and danger it can cause to steal all your logs in and possible take over your devices remotely. Well today OpenAI confirmed the hack! This video will show you step by step instructions to help remove any of the malicious code if your account was compromised, and to help protect yourself and your data in the future. Please share this with your family and friends..

Chat GPT was hacked😵‍💫👀😱🚨🚨The vulnerability and danger it can cause to steal all your logs in and possible take over your devices remotely. Well today OpenAI confirmed the hack! This video will show you step by step instructions to help remove any of the malicious code if your account was compromised, and to help protect yourself and your data in the future. Please share this with your family and friends..

Inspirenaire

113,149 views • 7 months ago

I found a vulnerability in Oracle VirtualBox (CVE-2026-21957) back in September 2025. It can be turned into AAR/AAW, and then escaping the VM is pretty easy. I originally planned to find a vulnerability for Pwn2Own, but since I found the vuln in September, sitting on a practical vuln for that long didn’t feel very ethical, so I eventually reported it to ZDI. But I still finished the exploitation + demo video as practice.

I found a vulnerability in Oracle VirtualBox (CVE-2026-21957) back in September 2025. It can be turned into AAR/AAW, and then escaping the VM is pretty easy. I originally planned to find a vulnerability for Pwn2Own, but since I found the vuln in September, sitting on a practical vuln for that long didn’t feel very ethical, so I eventually reported it to ZDI. But I still finished the exploitation + demo video as practice.

NiNi

92,984 views • 5 months ago

⚠️ Hey all, this is really important to iPhone/iPad users only: ⚠️ - There's a crash and while we work on a fix for that, here's the workaround for you: - Rotate your device during the Loading Screen (I know, it somehow works) - OR take a screenshot of the game during the Loading Screen - OR slide down to device settings (to access flashlight, brightness, airplane mode, etc) - You can also try to update your iOS to 17 if it's available for you - Because of that, we are also adding a Legendary Starr Drop in the shop for everyone We are also disabling the sharing Replays feature for the time being as there's another bug related it For Android players: go Brawl! 🔥 Sorry for the inconvenience caused 🙏

⚠️ Hey all, this is really important to iPhone/iPad users only: ⚠️ - There's a crash and while we work on a fix for that, here's the workaround for you: - Rotate your device during the Loading Screen (I know, it somehow works) - OR take a screenshot of the game during the Loading Screen - OR slide down to device settings (to access flashlight, brightness, airplane mode, etc) - You can also try to update your iOS to 17 if it's available for you - Because of that, we are also adding a Legendary Starr Drop in the shop for everyone We are also disabling the sharing Replays feature for the time being as there's another bug related it For Android players: go Brawl! 🔥 Sorry for the inconvenience caused 🙏

Brawl Stars

1,401,585 views • 2 years ago

Hello everyone, I've discovered a serious bug in One UI 8 Beta. When an app animation is running, if we open an app and immediately tap or swipe, the screen doesn't respond. For example, if I open the Gallery app and try to tap on a photo right away, the screen doesn't register the input. It's actually waiting for the animation to fully finish before executing the touch operation. Samsung has set this process to be serial rather than parallel. We have to wait until the animation completely ends before we can interact with the screen, which really affects efficiency. I hope you can report this issue to Samsung.

Hello everyone, I've discovered a serious bug in One UI 8 Beta. When an app animation is running, if we open an app and immediately tap or swipe, the screen doesn't respond. For example, if I open the Gallery app and try to tap on a photo right away, the screen doesn't register the input. It's actually waiting for the animation to fully finish before executing the touch operation. Samsung has set this process to be serial rather than parallel. We have to wait until the animation completely ends before we can interact with the screen, which really affects efficiency. I hope you can report this issue to Samsung.

Ice Universe

82,264 views • 1 year ago

“I would vote for Biden - if you have us vote tomorrow, you can count on my vote, her vote, the vote of any immigrant” An illegal immigrant we spoke to outside of St. Brigid’s in NYC, shares that he and any other illegal immigrant would vote for Biden if they had the option to come 2024. The woman sitting next to him then confirms this, sharing that “Trump is evil” | FRONTLINES TPUSA

“I would vote for Biden - if you have us vote tomorrow, you can count on my vote, her vote, the vote of any immigrant” An illegal immigrant we spoke to outside of St. Brigid’s in NYC, shares that he and any other illegal immigrant would vote for Biden if they had the option to come 2024. The woman sitting next to him then confirms this, sharing that “Trump is evil” | FRONTLINES TPUSA

Savanah Hernandez

226,165 views • 2 years ago