October 24, 2026

What happened

Between November 2025 and March 2026, Eye Security pushed more than 2 million updates to computers it did not own to switch off a background updater belonging to Time4Popcorn, an abandoned Popcorn Time copy. [1] [2]

Eye Security said the updater could have allowed an outsider to take over the machine. [1]

Why it matters

Time4Popcorn was associated with a free application that streamed pirated films and television over BitTorrent. [2]

Cited source evidence

These excerpts support the numbered claims above. They come from one source article and do not establish independent corroboration.

1. [1]

   Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to computers it did not own to switch off a background updater that it said could have allowed an outsider to take over the machine.

2. [2]

   The updater belongs to Time4Popcorn, an abandoned copy of Popcorn Time, a free app that streamed pirated films and TV over BitTorrent.

Read the original article →

What happened

Capcom disclosed unauthorized access to its CAPCOM ID online membership service, which provides access to online services and games. [1] [2]

As of October 22, the breach exposed 11,774,247 email addresses and system-specific identification information worldwide, plus account details such as creation dates, last login dates, login counts, and latest-login IP addresses. [3] [4]

In 43 cases, exposed information included date of birth, gender, country or region, and nickname; Capcom characterized the personal information as belonging to a small number of individuals. [4] [5]

Attackers illegally changed passwords on 196 accounts, and Capcom said it had reset those passwords. [6] [7]

Capcom said it implemented emergency measures, began identifying and addressing the attack method, and established a task force to gather information and prevent further damage. [10]

Why it matters

Capcom said services using CAPCOM ID remained operational while it activated incident-response procedures, investigated the breach, notified relevant authorities, and began contacting affected customers through a dedicated support channel. [8] [9]

Known limitations

The supplied material does not identify the initial access method, the attackers, or whether the investigation established a broader compromise beyond the listed CAPCOM ID information. [3] [9] [11]

Cited source evidence

These excerpts support the numbered claims above. They come from one source article and do not establish independent corroboration.

1. [1]

   Japanese gaming company Capcom has disclosed a data breach discovered on October 19 involving its CAPCOM ID service, which provides access to online services and games.

2. [2]

   “We have recently discovered that unauthorized access by a third party occurred to our online membership service “CAPCOM ID” (*1) , resulting in the leakage of some customer information.” reads the company’s notice .

3. [3]

   As of October 22, attackers stole 11,774,247 email addresses, along with account details including creation dates, last login dates, login counts, and the IP addresses used for the latest logins.

4. [4]

   “Number of leaked email addresses and system-specific identification information: 11,774,247 (worldwide total)” In 43 cases, hackers exposed date of birth, gender, country/region, and nickname.

5. [5]

   The company said the incident exposed personal information belonging to a small number of individuals.

6. [6]

   Capcom also reported that attackers illegally changed passwords on 196 accounts, and the company has already reset them.

7. [7]

   In addition, unauthorized password changes were confirmed for some accounts.

8. [8]

   Capcom has activated its incident response procedures and confirmed that services using CAPCOM ID remain operational.

9. [9]

   The company has notified the relevant authorities, is investigating the breach, and has begun contacting affected customers through a dedicated support channel.

10. [10]

    “In response, we implemented emergency measures and began identifying and addressing the attack method.” states the notice.”A task force was established within the company to gather information and take measures to prevent further damage.

11. [11]

    The investigation revealed that some customer information registered with “CAPCOM ID” had been leaked.

Read the original article →

What happened

Google updated its privacy policy to state that using personalized AI features in Search or Gemini may allow targeted advertising based on activity on other connected Google services. [1]

The policy says users may allow services such as Search or Gemini Apps to access data from other Google services they use. [2]

Why it matters

The described policy change links cross-service data access for personalized AI features with the potential use of activity for targeted advertising. [1] [2]

Cited source evidence

These excerpts support the numbered claims above. They come from one source article and do not establish independent corroboration.

1. [1]

   Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the company to serve targeted ads to users based on their activity on other connected Google services.

2. [2]

   "You may choose to allow certain Google services, including services like Search or Gemini Apps, to access data from other Google services you use,

Read the original article →