Vulnerability giving attackers full control of Macs is under active exploitation
2026-08-17T08:51:37Z•a90dfdd935992f84b85be935bad93ce47d3d62c47c8dd7343f747c289bc6ba35
account-takeoveractive-exploitationai-securitybaseboard-management-controllercredential-theftcybercrime-policymacosmalwaremicrosoft-exchangenation-statepasskeysphishingpost-quantum-cryptographyransomware-and-backdoorremote-accessscreen-sharingserver-securitysocial-engineeringsupply-chain-attacksurveillancewireless-securityzoom
What happened
Ars Technica security feed covering actively exploited vulnerabilities, supply-chain credential theft, server and endpoint compromise, authentication protections, surveillance, social engineering, cybercrime policy, and emerging AI-assisted attacks. The most urgent reports concern a Mac screen-sharing flaw enabling passwordless remote login, a maximum-severity Exchange flaw exploited by Kremlin-linked actors, and large-scale credential exfiltration from a compromised AI package.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- a90dfdd935992f84b85be935bad93ce47d3d62c47c8dd7343f747c289bc6ba35
- Enrichment time
- 2026-08-17T08:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.