Security firm used a streaming app's own updater to fix 2 million computers
Eye Security found the abandoned Time4Popcorn updater still running on an estimated 2.5–3 million Windows machines and up to 350,000 Macs, quietly phoning home over unencrypted connections. It registered the dormant update domain, reverse-engineered the mechanism, and pushed a fix that disabled the updater. By March 2026, requests had fallen by 98%.