Popcorn Time’s forgotten updater left millions of devices exposed to hijacking

You may have forgotten about Popcorn Time. Unfortunately, its updater didn’t forget about your device. Security researchers have intervened to disable an abandoned update mechanism in Time4Popcorn, a version of the once-popular streaming app. If left running in the background, the updater could...

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet

Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to computers it did not own to switch off a background updater that it said could have allowed an outsider to take over the machine. The updater belongs to Time4Popcorn , an abandoned cop...

PT-2026-82655

Name of the Vulnerable Software and Affected Versions Time4 Popcorn for Windows versions prior to 6.2.1.19 Time4Popcorn for MacOS versions prior to 6.2.1.18 Time4Popcorn for Android versions prior to 3.5.0.174 Description An issue in the background updater allows a remote attacker to execute...

EUVD-2026-67256

An issue in Time4 Popcorn for Windows = 6.2.1.18 and Time4Popcorn for MacOS = 6.2.1.17 and Time4Popcorn for Android = 3.5.0.173 allows a remote attacker to execute arbitrary code via the updater.exe for windows, PT.updd on MacOS components...