Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet

The Hacker News · Saturday, 24 October 2026 at 09:04 (3h ago) · Original article ↗

Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to computers it did not own to switch off a background updater that it said could have allowed an outsider to take over the machine.

The updater belongs to Time4Popcorn, an abandoned copy of Popcorn Time, a free app that streamed pirated films and TV over BitTorrent.

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

Final Fantasy 14 Players Deliver Perfect Response to 2026’s PHP Vulnerability

Final Fantasy 14 community gets a green thumb and waters plants for players who couldn't log in during this week's security debacle

Polygon 3h ago

Security

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the…

The Hacker News 6h ago

Security

Abandoned Popcorn Time app exposed millions of devices to RCE attacks

Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers. [...]

BleepingComputer 15h ago

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet

More Security & Privacy

Final Fantasy 14 Players Deliver Perfect Response to 2026’s PHP Vulnerability

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

Abandoned Popcorn Time app exposed millions of devices to RCE attacks