
Abandoned Popcorn Time updater risked takeover of millions of PCs
Eye Security sinkholed updater domains and pushed a disabling update to about 2 million Windows and macOS systems.
6 stories, newest first · one card per story

Eye Security sinkholed updater domains and pushed a disabling update to about 2 million Windows and macOS systems.

CVE-2026-30612, scored 9.8, let anyone owning abandoned updater domains push code as SYSTEM or root.

US-led international operation with Europol, CrowdStrike, and Shadowserver sinkholed the 20-year-old Sality P2P botnet, once exceeding one million infected machines.

US and European authorities, with CrowdStrike and Shadowserver, disrupted the 20-year-old Sality peer-to-peer botnet, severing 15,000+ infected machines from operators.

Law enforcement, CrowdStrike, and Shadowserver sinkholed the 23-year-old Sality P2P botnet, cutting 15,000+ infected machines from its operator.
Law enforcement and CrowdStrike disrupted the 23-year-old Sality P2P botnet, isolating 15,000+ infected machines and seizing linked domains.
Today 1.6K readers · 2.5K views · 792 reads · all time 189K views