Abandoned Popcorn Time app exposed millions of devices to RCE attacks

Researchers have remotely disabled a vulnerable updater in Time4Popcorn, an abandoned fork of the Popcorn Time BitTorrent client, BleepingComputer reports. The flaw could have allowed attackers to execute malicious code with elevated privileges on millions of computers still running the app.