Dead Popcorn Time updater risks millions of computers

Popcorn Time: Popcorn Time is a peer-to-peer streaming application built on BitTorrent technology that enables users to watch movies and TV shows. Development of the original project ended years ago, leaving forks and related components unmaintained. The news concerns the risks from an abandoned updater in one such fork, which continued to check insecure domains without verification and could have been exploited for remote code execution. Legacy Software Risk: Discontinued applications with background updaters that rely on lapsed domains create opportunities for attackers to deliver and execute arbitrary code with high privileges. Researcher Intervention: Security researchers recently registered abandoned update domains tied to a Popcorn Time fork and used them to push a self-disabling fix to affected systems.