Vulnerability giving attackers full control of Macs is under active exploitation

Ars Technica security feed covering actively exploited vulnerabilities, supply-chain credential theft, server and endpoint compromise, AI-assisted cyberattacks, phishing and social engineering, surveillance, authentication defenses, and cybercrime policy. The most urgent items involve a Mac screen-sharing flaw enabling passwordless remote access, a maximum-severity Exchange vulnerability exploited by Kremlin-linked actors, and widespread vulnerable BMCs that can enable server backdoors. No CVE identifiers are provided in the feed metadata.