Apple rolls out emergency macOS patches and adds 30‑day wait for AI‑generated vulnerability reports

Apple macOS security patch Screen Sharing vulnerability CVE‑2026‑65400 AI vulnerability report policy

Apple released security updates for macOS Tahoe 26.6.1, macOS Sequoia 15.7.9 and macOS Sonoma 14.8.9. The patches fix a critical Screen Sharing vulnerability (CVE‑2026‑65400) that could let a network attacker authenticate without valid credentials, potentially allowing remote screen view, file access or command execution. Apple issued the updates without the usual public beta testing and recommends all users install them immediately.

In a separate move, Apple announced a new policy that imposes a 30‑day waiting period for handling vulnerability reports generated with artificial‑intelligence tools. The rule limits the number of open reports each researcher can have at once and allows researchers to request limit increases for critical cases. Apple said the change is needed to manage a surge of AI‑generated submissions that have strained its security‑research portal and sometimes include false positives.

Entities: Alfredo Pesoli · Apple Inc. · Bynario · CVE‑2026‑43760 · CVE‑2026‑65400 · macOS

Claims

What the coverage asserts, and how well corroborated each claim is across sources.

[● 3 SOURCES] Apple introduced a 30‑day waiting period for processing vulnerability reports generated with AI tools. (All articles about policy change)
[● 4 SOURCES] The updates address a Screen Sharing vulnerability identified as CVE‑2026‑65400. (All articles)
[● 4 SOURCES] Apple issued the patches without the usual public beta testing. (All articles)
[● 4 SOURCES] The vulnerability could allow an attacker on the network to authenticate to Screen Sharing without valid credentials. (All articles)
[● 2 SOURCES] A surge of AI‑generated vulnerability reports has overwhelmed Apple’s security‑research portal. (All articles about policy change)
[● 5 SOURCES] Apple released macOS Tahoe 26.6.1, macOS Sequoia 15.7.9 and macOS Sonoma 14.8.9 security updates. (All articles)
[● 3 SOURCES] The Screen Sharing vulnerability was reported by security researcher Alfredo Pesoli via Bynario Atlas. (All articles)
[● 2 SOURCES] The policy limits the number of open reports each researcher can have at once and allows limit increase requests for critical cases. (All articles about policy change)