Abandoned Popcorn Time app exposed millions of devices to RCE attacks

Researchers remotely disabled a vulnerable updater within the discontinued Time4Popcorn application. This action mitigated a critical security flaw that could have enabled threat actors to execute malicious code with elevated privileges across millions of client devices via the update mechanism.