Imagine sitting at your desk, working on your Mac. Suddenly, your cursor starts moving on its own. It glides across the screen, opens your personal folders, and starts copying your files. You grab your mouse to fight it, but you have zero control. This isn't a hypothetical. It's not a glitch, either. A new macOS zero-day is actively hijacking Macs in the wild right now. If you have screen sharing enabled, you could be next.
Here's what's actually happening. Security analysts just found a critical flaw. It's cataloged as CVE-2026-65400. It's an unpatched macOS Screen Sharing exploit that attackers are using for remote code execution. They bypass Apple's security protocols, get full admin control of target machines, and run malicious code without a password. What makes this terrifying is that there's no official patch from Apple yet. We're completely exposed. The only way to protect yourself is to take control of your system before someone else does.
Here are three things you must do immediately to secure your Mac.
First, disable screen sharing right now. Open your System Settings, go to General, click Sharing, and turn off both Screen Sharing and Remote Management. If you don't use these for work, turn them off today. Leaving them on is like leaving your front door unlocked in a bad neighborhood.
Second, know the signs of a screen sharing hijack. If you see your cursor moving on its own, random apps opening, or if your Mac suddenly gets hot and slows down—which, honestly, is super creepy—disconnect your internet immediately. The second you turn off your Wi-Fi or unplug, you cut the hacker's connection. That stops the exploit and saves your data.
Third, audit your system. Check your Activity Monitor for weird processes, especially ones tied to remote sharing. If you're a system admin, search network logs for unexpected inbound connections on screen sharing ports. Hackers love to set up permanent access, so make sure no new user accounts were quietly created on your machine.
We're in a race against time until Apple releases a patch. Share this with every Mac user you know, check your settings immediately, and subscribe for real-time updates. Stay safe, stay vigilant, and go turn off that sharing toggle right now.