Загрузка видео...

Не удалось загрузить видео

На главную

PoC for a critical vulnerability in Apple macOS Screen Sharing (CVE-2026-65400). If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password. We reverse engineered Apple’s unusual macOS 26.6.1 patch to understand the root cause and exploitation path....

455,242 просмотров • 1 месяц назад •via X (Twitter)

Комментарии: 27

Фото профиля Tabor Bachelor
Tabor Bachelor1 месяц назад

the login screen becoming optional is a new level of screen sharing

Фото профиля Nafiz Bayındır
Nafiz Bayındır1 месяц назад

Always use Screen Sharing behind VPN

Фото профиля Christopher Price
Christopher Price1 месяц назад

Any idea how far back this goes?

Фото профиля Tony Stank
Tony Stank1 месяц назад

How much for the bounty?

Фото профиля zack0x01
zack0x011 месяц назад

is the blog article out ?

Фото профиля Michal Jareš
Michal Jareš1 месяц назад

The classic most secure ecosystem in the world moment.

Фото профиля appleforever11
appleforever111 месяц назад

I knew this exploit must have been really bad for apple to push out a patch so quickly for macOS Tahoe!!

Фото профиля Patti Degnan
Patti Degnan1 месяц назад

Unless you deployed SentinelOne…. Which then thinks the update is malware. So that’s fun.

Фото профиля KSPD THE ONE | 대한특수탐정더원
KSPD THE ONE | 대한특수탐정더원1 месяц назад

Screen sharing/remote access exposure is something we flag constantly during TSCM and corporate security sweeps. This kind of reverse-engineering writeup is a great reminder to keep those services locked down. Thanks for sharing.

Фото профиля Aurora 🌙🏳️‍⚧️
Aurora 🌙🏳️‍⚧️1 месяц назад

@geerlingguy I know you use this feature😬

Фото профиля 0x443
0x4431 месяц назад

I think they leave these things on purpose

Фото профиля hud
hud1 месяц назад

that's not a bug but a feature :v

Фото профиля Ottavio Fogliata
Ottavio Fogliata1 месяц назад

really curious what the patch diff reveals here. did apple repair the authentication flow itself, or just block this path?

Фото профиля Sleep
Sleep1 месяц назад

31337 FTW

Фото профиля on error resume next
on error resume next1 месяц назад

I got a bunch of Intel Macs and pray daily that I don't need to update to Tahoe. I even still got transparency in Terminals! Time to check if screen sharing's off...

Фото профиля HackerOx
HackerOx1 месяц назад

Which is the severity?

Фото профиля Branch
Branch1 месяц назад

Yikes

Фото профиля Moganesan
Moganesan1 месяц назад

@grok how much apple paid for this bug😅

Фото профиля 𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐
𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐1 месяц назад

@thegrugq Yuge

Фото профиля Nikolaus | Quantus
Nikolaus | Quantus1 месяц назад

Never trusted any of the "sharing" options in the sharing panel - I was right, I guess

Фото профиля Giedrius Trump
Giedrius Trump1 месяц назад

Yo 😳

Фото профиля sophs b
sophs b1 месяц назад

This is why I disable Screen Sharing. But does the patch fully close the hole or just make it harder?

Фото профиля Shalkie - The original! 🅅 🅅 🏳️‍🌈🏳️‍⚧️🫂💙🦋
Shalkie - The original! 🅅 🅅 🏳️‍🌈🏳️‍⚧️🫂💙🦋1 месяц назад

Truly Sharing with anyone that wants it...

Фото профиля rusa
rusa1 месяц назад

the patch is the easy part. screen sharing gets turned on once by remote management and then stays on for years, so the install base that matters is the machines nobody remembers enabling it on. keeping it off a flat network is what actually shrinks the pre auth surface.

Фото профиля strength and honor
strength and honor1 месяц назад

Now that should be fun.

Фото профиля ROADBOYY911
ROADBOYY9111 месяц назад

What's this pls

Фото профиля rahul
rahul1 месяц назад

Reminder for folks to use tailscale / wireguard to connect between your devices. Also enable the in-built apple firewall and restrict incoming conections.

Похожие видео

I'm using macOS for more than 14 years now, in a single laptop screen setup with lots of windows open, and I'm using macOS spaces everyday to organize my windows. Switching between spaces is easy: I hit CTRL+arrow left/right, it takes no time. What takes time however, is this macOS-native transition animation that takes a bit less than 1 second, for every single space switch. I've checked everywhere in macOS settings, asked friends with the same problem, and there's just no setting to disable this effect (even with Reduced Motion ON in Accessibility settings). This UX choice from Apple alone costs me days of my time every year, as I'm working non-stop on my SaaS business for 10h a day 5-6 days a week (Crisp for those who know about it!). I calculated that with my daily use of macOS spaces, in 6 months I'd perform 100,000 switches, which costs me the same in seconds waiting for the transition to complete. This represents almost 28 hours waiting. In 1 year, I'd have lost 2.4 days just... waiting! The Hack Fortunately, some other open-source projects discovered a hack not so long ago, which allows disabling the transition when switching spaces: it involves sending to the system a "fake" trackpad left/right swipe gesture that's faster than what's expected (faster than what a human can input via the Macbook's trackpad). Above some threshold, macOS just perform the space switch with absolutely no transition. A friend of mine, Yaël 🛸, made a quick prototype in Objective-C, and it magically worked! The Solution So, I asked my friend if we could make it a proper macOS app together, in a beautiful minimalist package, and he said yes! So, we launched Space Rabbit, a tiny 2MB fully native macOS app, that allows you to optimize macOS spaces for productivity! Space Rabbit is a full rewrite of the initial prototype in modern Swift, with a tray menu bar to configure the app, and a settings window, in a macOS app packaging. Space Rabbit can be downloaded right here: We just released V2 of the app last week, fixing a ton of little bugs, especially for dual screen setups. It's actively maintained to this day as it's my daily driver. The app is open-source: and will always be free, as it's helping improve our productivity in our daily Web Dev tasks for our main businesses. We'll be happy to implement more features from user requests, if you find this app useful and use it daily!

Valerian Saliou

221,065 просмотров • 1 месяц назад