Popcorn Time Serves Free Root Access

Millions of machines ran a dead Popcorn Time updater downloading unsigned binaries over HTTP with root privileges. Just another Tuesday in endpoint hygiene.

Source: SecurityWeek

The Full Story

Severity: Critical Mood: Ridiculous

Same story different day, as a defunct Time4Popcorn app ran an updater at boot over unencrypted HTTP with full root privileges for unverified binaries. This shocking lack of hygiene affected millions of Windows and Mac systems across consumer, corporate, and even government networks. We only survived this catastrophe because benevolent researchers took over the abandoned domains to neutralise the hazard before disaster struck. Why do we even bother hoping enterprise endpoints are clean?

#EndpointJoy #RootAccess

Open article →