CuraSec

Learn archived

Apple Screen Sharing Uses Unencrypted VNC Under the Hood

2026-08-18 11:37 UTC · SANS ISC · read the source ↗ #macos#vnc#configuration
  • Engineer — Learn: Useful context on macOS screen sharing’s VNC foundation — unencrypted by default with simple password auth — worth auditing whether screen sharing is enabled on any managed Mac fleet and confirming it is tunneled through SSH or restricted to VPN.
  • SOC/IR — Skip
  • Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.