Abandoned Time4Popcorn updater still runs on millions of machines
Eye Security says it still checks abandoned domains on more than 2.5 million Windows PCs and about 300,000 Macs.
58
Product
Time4Popcorn
- Mentions · 7d4
- Mentions · 30d5
- All mentions5
- First seenOct 23, 2026
- Last mentioned12h ago
Timeline
5 articles · newest firstAbandoned Popcorn Time updater risked takeover of millions of PCs
Eye Security sinkholed updater domains and pushed a disabling update to about 2 million Windows and macOS systems.
68
Abandoned Popcorn Time updater could hijack PCs via CVE-2026-30612
Eye Security seized update domains, pushed a disabling fix with over two million downloads, then gave 15 domains to Shadowserver.
71
Eye Security pushed 2 million updates to disable Popcorn Time updater
CVE-2026-30612, scored 9.8, let anyone owning abandoned updater domains push code as SYSTEM or root.
72
Abandoned Time4Popcorn updater allowed RCE over plain HTTP
Eye Security counted up to 3 million Windows and 350,000 macOS clients calling the domain it registered.
68
Related CVEs
by mentions- CVE-2026-30612<1%9.8Remote code execution in Time4 Popcorn updater components (Windows, macOS, Android)
Appears with
- Eye Securityorganization · 5
- Popcorn Timeproduct · 4
- Shadowserver Foundationorganization · 2
- The Shadowserver Foundationorganization · 2
- CISAorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.