Popcorn Time’s forgotten updater left millions of devices exposed to hijacking
2026-10-26T20:51:45Z•ac911b67da8420003b0d1c8a9f3cbe1815d2f83829e5e74ca93a6209f41050d5
October-2026credential-theftcritical-vulnerabilitiesdata-breachidentity-theftmalwarephishingprivacyremote-code-executionscamssecurity-newssextortionsoftware-supply-chainsurveillanceupdate-hijacking
What happened
Malwarebytes Labs security news feed covering software supply-chain compromise, critical vulnerabilities, phishing and credential theft, data breaches, privacy violations, scams, and device surveillance issues reported in October 2026. Notable items include hijacked Popcorn Time and AOMEI Backupper update mechanisms, critical PHP flaws enabling potential remote code execution, a Signal calling privacy bug, and multiple large-scale personal-data exposures.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- ac911b67da8420003b0d1c8a9f3cbe1815d2f83829e5e74ca93a6209f41050d5
- Enrichment time
- 2026-10-26T20:51:45Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.