Popcorn Time Updater Flaw Put Up to 350,000 Macs at Risk, Researchers Warn

Cybersecurity researchers at Eye Research found a vulnerability in Time4Popcorn, an unofficial version of Popcorn Time, that could allow attackers to run malicious code on Windows and macOS devices. The flaw stemmed from an updater that downloaded files without verifying their digital signatures and used unencrypted connections. Researchers developed a repair to disable the vulnerable component and distributed more than two million updates before ending the operation in March 2026. They still recommend uninstalling the app because other security risks remain.

from Gadgets 360 https://ift.tt/CS5U76I