Topic

Time4Popcorn

Latest news

24 Oct
Abandoned Time4Popcorn updater exposed millions to remote code execution
Researchers at Eye Security found the Time4Popcorn fork of Popcorn Time used an unencrypted, unsigned updater that contacted an abandoned domain, allowing anyone controlling that domain to push executables. After registering the domain, researchers observed millions of client connections and remotely disabled the vulnerable updater to stop potential attacks (CVE-2026-30612).
Security · 1 source

No articles about Time4Popcorn yet.