Eye Security Remotely Disables Popcorn Time Updater to Mitigate Botnet Threat

Dutch security firm Eye Security has pushed over 2 million updates to computers to remotely disable a background updater for the abandoned Popcorn Time application (Time4Popcorn). This updater, tracked as CVE-2026-30612, posed a critical vulnerability that could have allowed an attacker to take over affected machines and potentially fuel a botnet. With no official patch available, Eye Security took the unprecedented step of using the updater against itself to neutralize the threat.