AmsterdamAttackers gained root on Macs with screen sharing exposed online.
Anyone can seize full control, camera and keychain included, once port 5900 is open to the internet.
The Netherlands’ cyber centre caught it from victim reports, since Apple’s patch came after public disclosure at Black Hat.
Update macOS now and turn screen sharing off when unused.
Sources: Ars Technica