Last checked ยท Check before installing; only use the official link.
What we cover
Software on a home Windows or Mac computer: the system itself, web browsers and add-ons, everyday apps like Zoom and Signal, crypto wallets, and AI apps. Home routers and phones are a small extra section. We do not cover business servers.
Where the news comes from
- The US government's list of bugs being used in attacks (CISA's Known Exploited Vulnerabilities list).
- The makers' own security notes (Microsoft, Apple, Google, Mozilla, Zoom and others).
- The US bug database (NVD) and GitHub's security advisories.
Our rules
- Every problem must link at least one official source. Our build fails if one does not.
- We never guess version numbers, dates or tracking numbers. If a fixed version is listed, it has an official source next to it.
- "Being attacked now" needs a source: the maker, CISA or a named security team.
- If part of a story is only from researchers or the news, we mark it Unconfirmed.
- We write at about a 6th-grade reading level.
Who writes it
Patch Gap is run by Joshua Hale. Summaries are written with AI help from the official sources and then checked against them. Mistakes can still happen, so always read the official link before you change anything. Spotted a mistake? Email trustymodels+security@mail.grokbot.com.
How often we update
We check the sources every few hours. Every page shows a "last checked" date, and every problem shows when it was last updated. Agents can see each change with its time in /changes.json.
How we work out the "minimum safe version"
For each app, we take only fixed version numbers that come with an official source (the maker or a government list). The newest of those is the minimum safe version. If a fix has no single version number, such as a monthly Windows update, we say so instead of guessing.
What about older problems?
We list problems from the last 12 months that were used in real attacks, plus anything new. Older problems that were never used in attacks are already fixed in the newest version, so staying up to date covers them.
Be careful
Check before installing, and only use the official link. Fake "update" pop-ups and emails are a common trick. Patch Gap is free information, not professional security advice. When we get something wrong we fix it and log it on the corrections page.