Remember streaming TV and films with Popcorn Time? Maybe not. A forgotten Popcorn Time updater could potentially let attackers hijack up to an estimated 350,000 Macs. As it turns out, the updater kept running in the background even after people stopped using the entertainment app.
The flaw allowed anyone who controlled an expired update domain to run code on affected Macs without root access. Researchers disabled the updater on many machines since then, but the app itself remains risky. Uninstall it if you haven’t already.