{
 "schema_version": "1.0",
 "generated_at": "2026-11-07T16:04:48Z",
 "last_updated": "2026-11-07T12:01:37Z",
 "feed_version": "33bc46697a791b5a",
 "note": "Newest first. change is added, updated or removed. changed_fields lists the incident fields that changed. Fetch json_url for the full entry.",
 "agent_rules": [
  "Use only read-only checks (the commands marked read_only, or the app's own About menu). Never run anything that changes the computer.",
  "Never install, update, uninstall or change settings without the user's clear OK for that exact step.",
  "Only give the user the official links in this feed (official_patch_links and sources). Never send them to a download from anywhere else.",
  "If you cannot tell whether the user is affected, say so plainly instead of guessing.",
  "Say 'unconfirmed' when an incident's confidence is 'unconfirmed'."
 ],
 "count": 427,
 "changes": [
  {
   "id": "apple-webkit-pointer-auth-cve-2024-27834",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac, Safari, and iPhone: CISA says an old Apple bug is being used in real attacks. Update if you missed May 2024 fixes.",
   "url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "safari",
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-11-04"
  },
  {
   "id": "chrome-156-oct-29-security-fixes",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome update fixes 21 more security bugs (Oct 29). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-29"
  },
  {
   "id": "chrome-156-oct-27-security-fixes",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome update fixes 52 more security bugs (Oct 27). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "windows-shell-zero-day-oct-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug that lets a bad file skip Windows' safety warnings is being used by hackers",
   "url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-october-2026-updates",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Office (Word, Excel, Outlook): update to get 164 security fixes",
   "url": "https://patchgap.ai/incidents/office-october-2026-updates/",
   "json_url": "https://patchgap.ai/incidents/office-october-2026-updates.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-secure-boot-blackx-bootkit",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a hidden start-up virus (BlackX) works even on updated PCs, unless one extra step is done",
   "url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit/",
   "json_url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit.json",
   "status": "partial",
   "exploited_in_wild": "yes",
   "severity": "medium",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "macos-27-2-security-updates-oct-26",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac: macOS and Safari updates out today fix hundreds of security bugs",
   "url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "macos",
    "safari"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "iphone-ios-27-2-security-updates-oct-26",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "iPhone and iPad: October 26 updates fix hundreds of security bugs",
   "url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "iphone-ios"
   ],
   "updated_at": "2026-11-05"
  },
  {
   "id": "macos-coregraphics-zero-day-sept-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac and iPhone: a bad file could take over your device, and Apple says it was used in real attacks",
   "url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "chrome-156-security-fixes",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome 156 fixes 353 security bugs. Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "firefox-159-security-fixes",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Firefox 159 fixes 167 security bugs, and 159.0.1 fixes one more",
   "url": "https://patchgap.ai/incidents/firefox-159-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/firefox-159-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "firefox"
   ],
   "updated_at": "2026-11-03"
  },
  {
   "id": "emudhra-fake-website-certificates",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Fake website certificates: browsers and computers are blocking a certificate company's weak keys",
   "url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates/",
   "json_url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates.json",
   "status": "partial",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "chrome",
    "firefox",
    "edge",
    "windows",
    "macos",
    "tailscale"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "teamviewer-15-83-security-update",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "TeamViewer: update to version 15.83. A bad remote session could run code on your computer.",
   "url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update/",
   "json_url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "teamviewer"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "zoom-october-2026-security-bulletins",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Zoom: update to 7.2.0 or newer to fix bugs that could leak your data or crash the app",
   "url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins/",
   "json_url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "zoom"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "plex-media-server-plex2shell-attacks",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Plex Media Server: hackers are chaining bugs to break in. Update to 1.43.3 or newer.",
   "url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks/",
   "json_url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "plex-media-server"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "tailscale-ssh-flaws-tailworm",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Tailscale SSH: serious bugs are now fixed in Tailscale 1.104.4. Update now.",
   "url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm/",
   "json_url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "tailscale"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "popcorn-time-time4popcorn-dead-updater",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Popcorn Time (Time4Popcorn): the app's updater is open to takeover. There is no fix. Remove it.",
   "url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater/",
   "json_url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater.json",
   "status": "no-patch",
   "exploited_in_wild": "unknown",
   "severity": "critical",
   "products": [
    "time4popcorn"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "electrum-wallet-fake-server-fee-bump-theft",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Electrum Bitcoin wallet: bad servers can trick you into paying a thief. Update to 4.8.3.",
   "url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft/",
   "json_url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "electrum"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "fearless-wallet-extension-leaks-private-keys",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Fearless Wallet browser add-on stole users' wallet keys. There is no safe version.",
   "url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys/",
   "json_url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys.json",
   "status": "no-patch",
   "exploited_in_wild": "yes",
   "severity": "critical",
   "products": [
    "fearless-wallet-extension"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "signal-desktop-call-hang-up-bug",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Signal Desktop: update so calls end when you hang up",
   "url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug/",
   "json_url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "critical",
   "products": [
    "signal-desktop"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "telegram-desktop-link-account-takeover",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Telegram Desktop: clicking a bad link could let someone take over your account. Update to 7.2.9 or newer.",
   "url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover/",
   "json_url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "telegram-desktop"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "claude-code-plugin-hash-pin-bypass",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Claude Code: a bad plugin could sneak in code even when you pinned a safe version. Update to 2.1.179.",
   "url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass/",
   "json_url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "claude-code"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "opencode-windows-sign-in-code-run",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "OpenCode AI helper on Windows: a bad connected tool could run code when you sign in",
   "url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run/",
   "json_url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "opencode"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "netgear-router-and-extender-fixes-oct-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "NETGEAR routers and extenders: update your router's firmware (some older models will not get a fix)",
   "url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026.json",
   "status": "partial",
   "exploited_in_wild": "unknown",
   "severity": "medium",
   "products": [
    "netgear-routers"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "iphone-ads-and-hijacked-tags-spyware",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "iPhone: criminals are using bad ads and old website tags to attack iPhones that are not updated",
   "url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware/",
   "json_url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "microsoft-authenticator-android-token-bug",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Authenticator on Android: update the app. A bug could let another app get work-account sign-ins.",
   "url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug/",
   "json_url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "microsoft-authenticator"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-oct-2025",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the October 2025 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-nov-2025",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the November 2025 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-dec-2025",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the December 2025 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-jan-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the January 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-feb-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the February 2026 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-apr-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the April 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-aug-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the August 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-sep-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the September 2026 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "microsoft-defender-attacked-bugs-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: three bugs in Microsoft Defender, the built-in antivirus, were used in real attacks",
   "url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026/",
   "json_url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-attacked-bug-jan-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Office: a bug that lets a bad document skip Office's safety checks was used in real attacks",
   "url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-word-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Word: a bug that lets a bad document skip a safety check was used in real attacks",
   "url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-nov-2025",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Nov 2025): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-dec-2025",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Dec 2025): a bug in the part that draws graphics (ANGLE) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Feb 2026): a bug in the part that handles page styles (CSS) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-mar-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Mar 2026): bugs in the parts that run website code (V8) and draw images (Skia) were used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-apr-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Mar 2026): a bug in the part that handles 3D graphics (Dawn) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-jun-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Jun 2026): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-sep-2026-a",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Sep 2026, first fix): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-sep-2026-b",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Sep 2026, second fix): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-attacked-bugs-nov-2025",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac, iPhone and iPad: two bugs fixed in November 2025 were later found in real attacks",
   "url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-webkit-attacked-bug-dec-2025",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Safari, Mac and iPhone: a web page bug was used in targeted attacks",
   "url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "safari",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac and iPhone: a core system bug was used in targeted attacks",
   "url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "macos-screen-sharing-attacked-bug-aug-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac: a Screen Sharing bug let attackers on the network get in without a password",
   "url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "adobe-reader-attacked-bug-apr-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Adobe Acrobat Reader: a bad PDF could take over your computer, and it was used in real attacks",
   "url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "critical",
   "products": [
    "adobe-reader"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "notepad-plus-plus-updater-hijack-2026",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Notepad++: its old updater could be tricked into installing a fake update, and attackers did it",
   "url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026/",
   "json_url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "notepad-plus-plus"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "winrar-attacked-path-bugs-2025",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "WinRAR: opening a bad archive could drop a hidden program on your PC, and attackers used it",
   "url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025/",
   "json_url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "winrar"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-157-nov-3-security-fixes",
   "change": "updated",
   "at": "2026-11-07T12:01:37Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome 157 fixes 213 security bugs (Nov 3). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-11-03"
  },
  {
   "id": "apple-webkit-pointer-auth-cve-2024-27834",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac, Safari, and iPhone: CISA says an old Apple bug is being used in real attacks. Update if you missed May 2024 fixes.",
   "url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "safari",
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-11-04"
  },
  {
   "id": "chrome-156-oct-29-security-fixes",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome update fixes 21 more security bugs (Oct 29). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-29"
  },
  {
   "id": "chrome-156-oct-27-security-fixes",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome update fixes 52 more security bugs (Oct 27). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "windows-shell-zero-day-oct-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug that lets a bad file skip Windows' safety warnings is being used by hackers",
   "url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-october-2026-updates",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Office (Word, Excel, Outlook): update to get 164 security fixes",
   "url": "https://patchgap.ai/incidents/office-october-2026-updates/",
   "json_url": "https://patchgap.ai/incidents/office-october-2026-updates.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-secure-boot-blackx-bootkit",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a hidden start-up virus (BlackX) works even on updated PCs, unless one extra step is done",
   "url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit/",
   "json_url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit.json",
   "status": "partial",
   "exploited_in_wild": "yes",
   "severity": "medium",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "macos-27-2-security-updates-oct-26",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac: macOS and Safari updates out today fix hundreds of security bugs",
   "url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "macos",
    "safari"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "iphone-ios-27-2-security-updates-oct-26",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "iPhone and iPad: October 26 updates fix hundreds of security bugs",
   "url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "iphone-ios"
   ],
   "updated_at": "2026-11-05"
  },
  {
   "id": "macos-coregraphics-zero-day-sept-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac and iPhone: a bad file could take over your device, and Apple says it was used in real attacks",
   "url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "chrome-156-security-fixes",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome 156 fixes 353 security bugs. Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "firefox-159-security-fixes",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Firefox 159 fixes 167 security bugs, and 159.0.1 fixes one more",
   "url": "https://patchgap.ai/incidents/firefox-159-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/firefox-159-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "firefox"
   ],
   "updated_at": "2026-11-03"
  },
  {
   "id": "emudhra-fake-website-certificates",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Fake website certificates: browsers and computers are blocking a certificate company's weak keys",
   "url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates/",
   "json_url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates.json",
   "status": "partial",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "chrome",
    "firefox",
    "edge",
    "windows",
    "macos",
    "tailscale"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "teamviewer-15-83-security-update",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "TeamViewer: update to version 15.83. A bad remote session could run code on your computer.",
   "url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update/",
   "json_url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "teamviewer"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "zoom-october-2026-security-bulletins",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Zoom: update to 7.2.0 or newer to fix bugs that could leak your data or crash the app",
   "url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins/",
   "json_url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "zoom"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "plex-media-server-plex2shell-attacks",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Plex Media Server: hackers are chaining bugs to break in. Update to 1.43.3 or newer.",
   "url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks/",
   "json_url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "plex-media-server"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "tailscale-ssh-flaws-tailworm",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Tailscale SSH: serious bugs are now fixed in Tailscale 1.104.4. Update now.",
   "url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm/",
   "json_url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "tailscale"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "popcorn-time-time4popcorn-dead-updater",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Popcorn Time (Time4Popcorn): the app's updater is open to takeover. There is no fix. Remove it.",
   "url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater/",
   "json_url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater.json",
   "status": "no-patch",
   "exploited_in_wild": "unknown",
   "severity": "critical",
   "products": [
    "time4popcorn"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "electrum-wallet-fake-server-fee-bump-theft",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Electrum Bitcoin wallet: bad servers can trick you into paying a thief. Update to 4.8.3.",
   "url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft/",
   "json_url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "electrum"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "fearless-wallet-extension-leaks-private-keys",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Fearless Wallet browser add-on stole users' wallet keys. There is no safe version.",
   "url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys/",
   "json_url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys.json",
   "status": "no-patch",
   "exploited_in_wild": "yes",
   "severity": "critical",
   "products": [
    "fearless-wallet-extension"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "signal-desktop-call-hang-up-bug",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Signal Desktop: update so calls end when you hang up",
   "url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug/",
   "json_url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "critical",
   "products": [
    "signal-desktop"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "telegram-desktop-link-account-takeover",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Telegram Desktop: clicking a bad link could let someone take over your account. Update to 7.2.9 or newer.",
   "url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover/",
   "json_url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "telegram-desktop"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "claude-code-plugin-hash-pin-bypass",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Claude Code: a bad plugin could sneak in code even when you pinned a safe version. Update to 2.1.179.",
   "url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass/",
   "json_url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "claude-code"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "opencode-windows-sign-in-code-run",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "OpenCode AI helper on Windows: a bad connected tool could run code when you sign in",
   "url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run/",
   "json_url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "opencode"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "netgear-router-and-extender-fixes-oct-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "NETGEAR routers and extenders: update your router's firmware (some older models will not get a fix)",
   "url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026.json",
   "status": "partial",
   "exploited_in_wild": "unknown",
   "severity": "medium",
   "products": [
    "netgear-routers"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "iphone-ads-and-hijacked-tags-spyware",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "iPhone: criminals are using bad ads and old website tags to attack iPhones that are not updated",
   "url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware/",
   "json_url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "microsoft-authenticator-android-token-bug",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Authenticator on Android: update the app. A bug could let another app get work-account sign-ins.",
   "url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug/",
   "json_url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "microsoft-authenticator"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-oct-2025",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the October 2025 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-nov-2025",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the November 2025 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-dec-2025",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the December 2025 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-jan-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the January 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-feb-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the February 2026 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-apr-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the April 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-aug-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the August 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-sep-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the September 2026 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "microsoft-defender-attacked-bugs-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: three bugs in Microsoft Defender, the built-in antivirus, were used in real attacks",
   "url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026/",
   "json_url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-attacked-bug-jan-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Office: a bug that lets a bad document skip Office's safety checks was used in real attacks",
   "url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-word-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Word: a bug that lets a bad document skip a safety check was used in real attacks",
   "url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-nov-2025",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Nov 2025): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-dec-2025",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Dec 2025): a bug in the part that draws graphics (ANGLE) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Feb 2026): a bug in the part that handles page styles (CSS) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-mar-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Mar 2026): bugs in the parts that run website code (V8) and draw images (Skia) were used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-apr-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Mar 2026): a bug in the part that handles 3D graphics (Dawn) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-jun-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Jun 2026): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-sep-2026-a",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Sep 2026, first fix): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-sep-2026-b",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Sep 2026, second fix): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-attacked-bugs-nov-2025",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac, iPhone and iPad: two bugs fixed in November 2025 were later found in real attacks",
   "url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-webkit-attacked-bug-dec-2025",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Safari, Mac and iPhone: a web page bug was used in targeted attacks",
   "url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "safari",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac and iPhone: a core system bug was used in targeted attacks",
   "url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "macos-screen-sharing-attacked-bug-aug-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac: a Screen Sharing bug let attackers on the network get in without a password",
   "url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "adobe-reader-attacked-bug-apr-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Adobe Acrobat Reader: a bad PDF could take over your computer, and it was used in real attacks",
   "url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "critical",
   "products": [
    "adobe-reader"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "notepad-plus-plus-updater-hijack-2026",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Notepad++: its old updater could be tricked into installing a fake update, and attackers did it",
   "url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026/",
   "json_url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "notepad-plus-plus"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "winrar-attacked-path-bugs-2025",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "WinRAR: opening a bad archive could drop a hidden program on your PC, and attackers used it",
   "url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025/",
   "json_url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "winrar"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-157-nov-3-security-fixes",
   "change": "updated",
   "at": "2026-11-07T08:06:52Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome 157 fixes 213 security bugs (Nov 3). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-11-03"
  },
  {
   "id": "apple-webkit-pointer-auth-cve-2024-27834",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac, Safari, and iPhone: CISA says an old Apple bug is being used in real attacks. Update if you missed May 2024 fixes.",
   "url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "safari",
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-11-04"
  },
  {
   "id": "chrome-156-oct-29-security-fixes",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome update fixes 21 more security bugs (Oct 29). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-29"
  },
  {
   "id": "chrome-156-oct-27-security-fixes",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome update fixes 52 more security bugs (Oct 27). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "windows-shell-zero-day-oct-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug that lets a bad file skip Windows' safety warnings is being used by hackers",
   "url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-october-2026-updates",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Office (Word, Excel, Outlook): update to get 164 security fixes",
   "url": "https://patchgap.ai/incidents/office-october-2026-updates/",
   "json_url": "https://patchgap.ai/incidents/office-october-2026-updates.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-secure-boot-blackx-bootkit",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a hidden start-up virus (BlackX) works even on updated PCs, unless one extra step is done",
   "url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit/",
   "json_url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit.json",
   "status": "partial",
   "exploited_in_wild": "yes",
   "severity": "medium",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "macos-27-2-security-updates-oct-26",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac: macOS and Safari updates out today fix hundreds of security bugs",
   "url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "macos",
    "safari"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "iphone-ios-27-2-security-updates-oct-26",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "iPhone and iPad: October 26 updates fix hundreds of security bugs",
   "url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "iphone-ios"
   ],
   "updated_at": "2026-11-05"
  },
  {
   "id": "macos-coregraphics-zero-day-sept-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac and iPhone: a bad file could take over your device, and Apple says it was used in real attacks",
   "url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "chrome-156-security-fixes",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome 156 fixes 353 security bugs. Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "firefox-159-security-fixes",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Firefox 159 fixes 167 security bugs, and 159.0.1 fixes one more",
   "url": "https://patchgap.ai/incidents/firefox-159-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/firefox-159-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "firefox"
   ],
   "updated_at": "2026-11-03"
  },
  {
   "id": "emudhra-fake-website-certificates",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Fake website certificates: browsers and computers are blocking a certificate company's weak keys",
   "url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates/",
   "json_url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates.json",
   "status": "partial",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "chrome",
    "firefox",
    "edge",
    "windows",
    "macos",
    "tailscale"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "teamviewer-15-83-security-update",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "TeamViewer: update to version 15.83. A bad remote session could run code on your computer.",
   "url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update/",
   "json_url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "teamviewer"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "zoom-october-2026-security-bulletins",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Zoom: update to 7.2.0 or newer to fix bugs that could leak your data or crash the app",
   "url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins/",
   "json_url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "zoom"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "plex-media-server-plex2shell-attacks",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Plex Media Server: hackers are chaining bugs to break in. Update to 1.43.3 or newer.",
   "url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks/",
   "json_url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "plex-media-server"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "tailscale-ssh-flaws-tailworm",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Tailscale SSH: serious bugs are now fixed in Tailscale 1.104.4. Update now.",
   "url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm/",
   "json_url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "tailscale"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "popcorn-time-time4popcorn-dead-updater",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Popcorn Time (Time4Popcorn): the app's updater is open to takeover. There is no fix. Remove it.",
   "url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater/",
   "json_url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater.json",
   "status": "no-patch",
   "exploited_in_wild": "unknown",
   "severity": "critical",
   "products": [
    "time4popcorn"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "electrum-wallet-fake-server-fee-bump-theft",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Electrum Bitcoin wallet: bad servers can trick you into paying a thief. Update to 4.8.3.",
   "url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft/",
   "json_url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "electrum"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "fearless-wallet-extension-leaks-private-keys",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Fearless Wallet browser add-on stole users' wallet keys. There is no safe version.",
   "url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys/",
   "json_url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys.json",
   "status": "no-patch",
   "exploited_in_wild": "yes",
   "severity": "critical",
   "products": [
    "fearless-wallet-extension"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "signal-desktop-call-hang-up-bug",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Signal Desktop: update so calls end when you hang up",
   "url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug/",
   "json_url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "critical",
   "products": [
    "signal-desktop"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "telegram-desktop-link-account-takeover",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Telegram Desktop: clicking a bad link could let someone take over your account. Update to 7.2.9 or newer.",
   "url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover/",
   "json_url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "telegram-desktop"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "claude-code-plugin-hash-pin-bypass",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Claude Code: a bad plugin could sneak in code even when you pinned a safe version. Update to 2.1.179.",
   "url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass/",
   "json_url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "claude-code"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "opencode-windows-sign-in-code-run",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "OpenCode AI helper on Windows: a bad connected tool could run code when you sign in",
   "url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run/",
   "json_url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "opencode"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "netgear-router-and-extender-fixes-oct-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "NETGEAR routers and extenders: update your router's firmware (some older models will not get a fix)",
   "url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026.json",
   "status": "partial",
   "exploited_in_wild": "unknown",
   "severity": "medium",
   "products": [
    "netgear-routers"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "iphone-ads-and-hijacked-tags-spyware",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "iPhone: criminals are using bad ads and old website tags to attack iPhones that are not updated",
   "url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware/",
   "json_url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "microsoft-authenticator-android-token-bug",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Authenticator on Android: update the app. A bug could let another app get work-account sign-ins.",
   "url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug/",
   "json_url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "microsoft-authenticator"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-oct-2025",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the October 2025 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-nov-2025",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the November 2025 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-dec-2025",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the December 2025 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-jan-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the January 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-feb-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the February 2026 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-apr-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the April 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-aug-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the August 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-sep-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the September 2026 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "microsoft-defender-attacked-bugs-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: three bugs in Microsoft Defender, the built-in antivirus, were used in real attacks",
   "url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026/",
   "json_url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-attacked-bug-jan-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Office: a bug that lets a bad document skip Office's safety checks was used in real attacks",
   "url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-word-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Word: a bug that lets a bad document skip a safety check was used in real attacks",
   "url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-nov-2025",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Nov 2025): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-dec-2025",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Dec 2025): a bug in the part that draws graphics (ANGLE) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Feb 2026): a bug in the part that handles page styles (CSS) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-mar-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Mar 2026): bugs in the parts that run website code (V8) and draw images (Skia) were used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-apr-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Mar 2026): a bug in the part that handles 3D graphics (Dawn) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-jun-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Jun 2026): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-sep-2026-a",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Sep 2026, first fix): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-sep-2026-b",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Sep 2026, second fix): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-attacked-bugs-nov-2025",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac, iPhone and iPad: two bugs fixed in November 2025 were later found in real attacks",
   "url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-webkit-attacked-bug-dec-2025",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Safari, Mac and iPhone: a web page bug was used in targeted attacks",
   "url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "safari",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac and iPhone: a core system bug was used in targeted attacks",
   "url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "macos-screen-sharing-attacked-bug-aug-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac: a Screen Sharing bug let attackers on the network get in without a password",
   "url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "adobe-reader-attacked-bug-apr-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Adobe Acrobat Reader: a bad PDF could take over your computer, and it was used in real attacks",
   "url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "critical",
   "products": [
    "adobe-reader"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "notepad-plus-plus-updater-hijack-2026",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Notepad++: its old updater could be tricked into installing a fake update, and attackers did it",
   "url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026/",
   "json_url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "notepad-plus-plus"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "winrar-attacked-path-bugs-2025",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "WinRAR: opening a bad archive could drop a hidden program on your PC, and attackers used it",
   "url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025/",
   "json_url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "winrar"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-157-nov-3-security-fixes",
   "change": "updated",
   "at": "2026-11-07T04:15:40Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome 157 fixes 213 security bugs (Nov 3). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-11-03"
  },
  {
   "id": "apple-webkit-pointer-auth-cve-2024-27834",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac, Safari, and iPhone: CISA says an old Apple bug is being used in real attacks. Update if you missed May 2024 fixes.",
   "url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "safari",
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-11-04"
  },
  {
   "id": "chrome-156-oct-29-security-fixes",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome update fixes 21 more security bugs (Oct 29). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-29"
  },
  {
   "id": "chrome-156-oct-27-security-fixes",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome update fixes 52 more security bugs (Oct 27). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "windows-shell-zero-day-oct-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug that lets a bad file skip Windows' safety warnings is being used by hackers",
   "url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-october-2026-updates",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Office (Word, Excel, Outlook): update to get 164 security fixes",
   "url": "https://patchgap.ai/incidents/office-october-2026-updates/",
   "json_url": "https://patchgap.ai/incidents/office-october-2026-updates.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-secure-boot-blackx-bootkit",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a hidden start-up virus (BlackX) works even on updated PCs, unless one extra step is done",
   "url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit/",
   "json_url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit.json",
   "status": "partial",
   "exploited_in_wild": "yes",
   "severity": "medium",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "macos-27-2-security-updates-oct-26",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac: macOS and Safari updates out today fix hundreds of security bugs",
   "url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "macos",
    "safari"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "iphone-ios-27-2-security-updates-oct-26",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "iPhone and iPad: October 26 updates fix hundreds of security bugs",
   "url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "iphone-ios"
   ],
   "updated_at": "2026-11-05"
  },
  {
   "id": "macos-coregraphics-zero-day-sept-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac and iPhone: a bad file could take over your device, and Apple says it was used in real attacks",
   "url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "chrome-156-security-fixes",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome 156 fixes 353 security bugs. Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "firefox-159-security-fixes",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Firefox 159 fixes 167 security bugs, and 159.0.1 fixes one more",
   "url": "https://patchgap.ai/incidents/firefox-159-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/firefox-159-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "firefox"
   ],
   "updated_at": "2026-11-03"
  },
  {
   "id": "emudhra-fake-website-certificates",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Fake website certificates: browsers and computers are blocking a certificate company's weak keys",
   "url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates/",
   "json_url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates.json",
   "status": "partial",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "chrome",
    "firefox",
    "edge",
    "windows",
    "macos",
    "tailscale"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "teamviewer-15-83-security-update",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "TeamViewer: update to version 15.83. A bad remote session could run code on your computer.",
   "url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update/",
   "json_url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "teamviewer"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "zoom-october-2026-security-bulletins",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Zoom: update to 7.2.0 or newer to fix bugs that could leak your data or crash the app",
   "url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins/",
   "json_url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "zoom"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "plex-media-server-plex2shell-attacks",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Plex Media Server: hackers are chaining bugs to break in. Update to 1.43.3 or newer.",
   "url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks/",
   "json_url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "plex-media-server"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "tailscale-ssh-flaws-tailworm",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Tailscale SSH: serious bugs are now fixed in Tailscale 1.104.4. Update now.",
   "url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm/",
   "json_url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "tailscale"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "popcorn-time-time4popcorn-dead-updater",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Popcorn Time (Time4Popcorn): the app's updater is open to takeover. There is no fix. Remove it.",
   "url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater/",
   "json_url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater.json",
   "status": "no-patch",
   "exploited_in_wild": "unknown",
   "severity": "critical",
   "products": [
    "time4popcorn"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "electrum-wallet-fake-server-fee-bump-theft",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Electrum Bitcoin wallet: bad servers can trick you into paying a thief. Update to 4.8.3.",
   "url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft/",
   "json_url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "electrum"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "fearless-wallet-extension-leaks-private-keys",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Fearless Wallet browser add-on stole users' wallet keys. There is no safe version.",
   "url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys/",
   "json_url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys.json",
   "status": "no-patch",
   "exploited_in_wild": "yes",
   "severity": "critical",
   "products": [
    "fearless-wallet-extension"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "signal-desktop-call-hang-up-bug",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Signal Desktop: update so calls end when you hang up",
   "url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug/",
   "json_url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "critical",
   "products": [
    "signal-desktop"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "telegram-desktop-link-account-takeover",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Telegram Desktop: clicking a bad link could let someone take over your account. Update to 7.2.9 or newer.",
   "url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover/",
   "json_url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "telegram-desktop"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "claude-code-plugin-hash-pin-bypass",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Claude Code: a bad plugin could sneak in code even when you pinned a safe version. Update to 2.1.179.",
   "url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass/",
   "json_url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "claude-code"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "opencode-windows-sign-in-code-run",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "OpenCode AI helper on Windows: a bad connected tool could run code when you sign in",
   "url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run/",
   "json_url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "opencode"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "netgear-router-and-extender-fixes-oct-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "NETGEAR routers and extenders: update your router's firmware (some older models will not get a fix)",
   "url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026.json",
   "status": "partial",
   "exploited_in_wild": "unknown",
   "severity": "medium",
   "products": [
    "netgear-routers"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "iphone-ads-and-hijacked-tags-spyware",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "iPhone: criminals are using bad ads and old website tags to attack iPhones that are not updated",
   "url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware/",
   "json_url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "microsoft-authenticator-android-token-bug",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Authenticator on Android: update the app. A bug could let another app get work-account sign-ins.",
   "url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug/",
   "json_url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "microsoft-authenticator"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-oct-2025",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the October 2025 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-nov-2025",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the November 2025 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-dec-2025",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the December 2025 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-jan-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the January 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-feb-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the February 2026 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-apr-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the April 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-aug-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the August 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-sep-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the September 2026 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "microsoft-defender-attacked-bugs-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: three bugs in Microsoft Defender, the built-in antivirus, were used in real attacks",
   "url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026/",
   "json_url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-attacked-bug-jan-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Office: a bug that lets a bad document skip Office's safety checks was used in real attacks",
   "url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-word-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Word: a bug that lets a bad document skip a safety check was used in real attacks",
   "url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-nov-2025",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Nov 2025): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-dec-2025",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Dec 2025): a bug in the part that draws graphics (ANGLE) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Feb 2026): a bug in the part that handles page styles (CSS) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-mar-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Mar 2026): bugs in the parts that run website code (V8) and draw images (Skia) were used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-apr-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Mar 2026): a bug in the part that handles 3D graphics (Dawn) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-jun-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Jun 2026): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-sep-2026-a",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Sep 2026, first fix): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-sep-2026-b",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Sep 2026, second fix): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-attacked-bugs-nov-2025",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac, iPhone and iPad: two bugs fixed in November 2025 were later found in real attacks",
   "url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-webkit-attacked-bug-dec-2025",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Safari, Mac and iPhone: a web page bug was used in targeted attacks",
   "url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "safari",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac and iPhone: a core system bug was used in targeted attacks",
   "url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "macos-screen-sharing-attacked-bug-aug-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac: a Screen Sharing bug let attackers on the network get in without a password",
   "url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "adobe-reader-attacked-bug-apr-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Adobe Acrobat Reader: a bad PDF could take over your computer, and it was used in real attacks",
   "url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "critical",
   "products": [
    "adobe-reader"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "notepad-plus-plus-updater-hijack-2026",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Notepad++: its old updater could be tricked into installing a fake update, and attackers did it",
   "url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026/",
   "json_url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "notepad-plus-plus"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "winrar-attacked-path-bugs-2025",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "WinRAR: opening a bad archive could drop a hidden program on your PC, and attackers used it",
   "url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025/",
   "json_url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "winrar"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-157-nov-3-security-fixes",
   "change": "updated",
   "at": "2026-11-06T20:08:06Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome 157 fixes 213 security bugs (Nov 3). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-11-03"
  },
  {
   "id": "apple-webkit-pointer-auth-cve-2024-27834",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac, Safari, and iPhone: CISA says an old Apple bug is being used in real attacks. Update if you missed May 2024 fixes.",
   "url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "safari",
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-11-04"
  },
  {
   "id": "chrome-156-oct-29-security-fixes",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome update fixes 21 more security bugs (Oct 29). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-29"
  },
  {
   "id": "chrome-156-oct-27-security-fixes",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome update fixes 52 more security bugs (Oct 27). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "windows-shell-zero-day-oct-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug that lets a bad file skip Windows' safety warnings is being used by hackers",
   "url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-october-2026-updates",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Office (Word, Excel, Outlook): update to get 164 security fixes",
   "url": "https://patchgap.ai/incidents/office-october-2026-updates/",
   "json_url": "https://patchgap.ai/incidents/office-october-2026-updates.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-secure-boot-blackx-bootkit",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a hidden start-up virus (BlackX) works even on updated PCs, unless one extra step is done",
   "url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit/",
   "json_url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit.json",
   "status": "partial",
   "exploited_in_wild": "yes",
   "severity": "medium",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "macos-27-2-security-updates-oct-26",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac: macOS and Safari updates out today fix hundreds of security bugs",
   "url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "macos",
    "safari"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "iphone-ios-27-2-security-updates-oct-26",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "iPhone and iPad: October 26 updates fix hundreds of security bugs",
   "url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "iphone-ios"
   ],
   "updated_at": "2026-11-05"
  },
  {
   "id": "macos-coregraphics-zero-day-sept-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac and iPhone: a bad file could take over your device, and Apple says it was used in real attacks",
   "url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "chrome-156-security-fixes",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome 156 fixes 353 security bugs. Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "firefox-159-security-fixes",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Firefox 159 fixes 167 security bugs, and 159.0.1 fixes one more",
   "url": "https://patchgap.ai/incidents/firefox-159-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/firefox-159-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "firefox"
   ],
   "updated_at": "2026-11-03"
  },
  {
   "id": "emudhra-fake-website-certificates",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Fake website certificates: browsers and computers are blocking a certificate company's weak keys",
   "url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates/",
   "json_url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates.json",
   "status": "partial",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "chrome",
    "firefox",
    "edge",
    "windows",
    "macos",
    "tailscale"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "teamviewer-15-83-security-update",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "TeamViewer: update to version 15.83. A bad remote session could run code on your computer.",
   "url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update/",
   "json_url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "teamviewer"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "zoom-october-2026-security-bulletins",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Zoom: update to 7.2.0 or newer to fix bugs that could leak your data or crash the app",
   "url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins/",
   "json_url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "zoom"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "plex-media-server-plex2shell-attacks",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Plex Media Server: hackers are chaining bugs to break in. Update to 1.43.3 or newer.",
   "url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks/",
   "json_url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "plex-media-server"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "tailscale-ssh-flaws-tailworm",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Tailscale SSH: serious bugs are now fixed in Tailscale 1.104.4. Update now.",
   "url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm/",
   "json_url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "tailscale"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "popcorn-time-time4popcorn-dead-updater",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Popcorn Time (Time4Popcorn): the app's updater is open to takeover. There is no fix. Remove it.",
   "url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater/",
   "json_url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater.json",
   "status": "no-patch",
   "exploited_in_wild": "unknown",
   "severity": "critical",
   "products": [
    "time4popcorn"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "electrum-wallet-fake-server-fee-bump-theft",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Electrum Bitcoin wallet: bad servers can trick you into paying a thief. Update to 4.8.3.",
   "url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft/",
   "json_url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "electrum"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "fearless-wallet-extension-leaks-private-keys",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Fearless Wallet browser add-on stole users' wallet keys. There is no safe version.",
   "url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys/",
   "json_url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys.json",
   "status": "no-patch",
   "exploited_in_wild": "yes",
   "severity": "critical",
   "products": [
    "fearless-wallet-extension"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "signal-desktop-call-hang-up-bug",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Signal Desktop: update so calls end when you hang up",
   "url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug/",
   "json_url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "critical",
   "products": [
    "signal-desktop"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "telegram-desktop-link-account-takeover",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Telegram Desktop: clicking a bad link could let someone take over your account. Update to 7.2.9 or newer.",
   "url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover/",
   "json_url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "telegram-desktop"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "claude-code-plugin-hash-pin-bypass",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Claude Code: a bad plugin could sneak in code even when you pinned a safe version. Update to 2.1.179.",
   "url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass/",
   "json_url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "claude-code"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "opencode-windows-sign-in-code-run",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "OpenCode AI helper on Windows: a bad connected tool could run code when you sign in",
   "url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run/",
   "json_url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "opencode"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "netgear-router-and-extender-fixes-oct-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "NETGEAR routers and extenders: update your router's firmware (some older models will not get a fix)",
   "url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026.json",
   "status": "partial",
   "exploited_in_wild": "unknown",
   "severity": "medium",
   "products": [
    "netgear-routers"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "iphone-ads-and-hijacked-tags-spyware",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "iPhone: criminals are using bad ads and old website tags to attack iPhones that are not updated",
   "url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware/",
   "json_url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "microsoft-authenticator-android-token-bug",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Authenticator on Android: update the app. A bug could let another app get work-account sign-ins.",
   "url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug/",
   "json_url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "microsoft-authenticator"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-oct-2025",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the October 2025 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-nov-2025",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the November 2025 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-dec-2025",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the December 2025 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-jan-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the January 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-feb-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the February 2026 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-apr-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the April 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-aug-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the August 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-sep-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the September 2026 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "microsoft-defender-attacked-bugs-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: three bugs in Microsoft Defender, the built-in antivirus, were used in real attacks",
   "url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026/",
   "json_url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-attacked-bug-jan-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Office: a bug that lets a bad document skip Office's safety checks was used in real attacks",
   "url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-word-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Word: a bug that lets a bad document skip a safety check was used in real attacks",
   "url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-nov-2025",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Nov 2025): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-dec-2025",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Dec 2025): a bug in the part that draws graphics (ANGLE) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Feb 2026): a bug in the part that handles page styles (CSS) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-mar-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Mar 2026): bugs in the parts that run website code (V8) and draw images (Skia) were used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-apr-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Mar 2026): a bug in the part that handles 3D graphics (Dawn) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-jun-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Jun 2026): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-sep-2026-a",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Sep 2026, first fix): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-sep-2026-b",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Sep 2026, second fix): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-attacked-bugs-nov-2025",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac, iPhone and iPad: two bugs fixed in November 2025 were later found in real attacks",
   "url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-webkit-attacked-bug-dec-2025",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Safari, Mac and iPhone: a web page bug was used in targeted attacks",
   "url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "safari",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac and iPhone: a core system bug was used in targeted attacks",
   "url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "macos-screen-sharing-attacked-bug-aug-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac: a Screen Sharing bug let attackers on the network get in without a password",
   "url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "adobe-reader-attacked-bug-apr-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Adobe Acrobat Reader: a bad PDF could take over your computer, and it was used in real attacks",
   "url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "critical",
   "products": [
    "adobe-reader"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "notepad-plus-plus-updater-hijack-2026",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Notepad++: its old updater could be tricked into installing a fake update, and attackers did it",
   "url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026/",
   "json_url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "notepad-plus-plus"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "winrar-attacked-path-bugs-2025",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "WinRAR: opening a bad archive could drop a hidden program on your PC, and attackers used it",
   "url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025/",
   "json_url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "winrar"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-157-nov-3-security-fixes",
   "change": "updated",
   "at": "2026-11-06T16:20:26Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome 157 fixes 213 security bugs (Nov 3). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-11-03"
  },
  {
   "id": "apple-webkit-pointer-auth-cve-2024-27834",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac, Safari, and iPhone: CISA says an old Apple bug is being used in real attacks. Update if you missed May 2024 fixes.",
   "url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "safari",
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-11-04"
  },
  {
   "id": "chrome-156-oct-29-security-fixes",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome update fixes 21 more security bugs (Oct 29). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-29"
  },
  {
   "id": "chrome-156-oct-27-security-fixes",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome update fixes 52 more security bugs (Oct 27). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "windows-shell-zero-day-oct-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug that lets a bad file skip Windows' safety warnings is being used by hackers",
   "url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-october-2026-updates",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Office (Word, Excel, Outlook): update to get 164 security fixes",
   "url": "https://patchgap.ai/incidents/office-october-2026-updates/",
   "json_url": "https://patchgap.ai/incidents/office-october-2026-updates.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-secure-boot-blackx-bootkit",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a hidden start-up virus (BlackX) works even on updated PCs, unless one extra step is done",
   "url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit/",
   "json_url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit.json",
   "status": "partial",
   "exploited_in_wild": "yes",
   "severity": "medium",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "macos-27-2-security-updates-oct-26",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac: macOS and Safari updates out today fix hundreds of security bugs",
   "url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "macos",
    "safari"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "iphone-ios-27-2-security-updates-oct-26",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "iPhone and iPad: October 26 updates fix hundreds of security bugs",
   "url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "iphone-ios"
   ],
   "updated_at": "2026-11-05"
  },
  {
   "id": "macos-coregraphics-zero-day-sept-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac and iPhone: a bad file could take over your device, and Apple says it was used in real attacks",
   "url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "chrome-156-security-fixes",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome 156 fixes 353 security bugs. Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "firefox-159-security-fixes",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Firefox 159 fixes 167 security bugs, and 159.0.1 fixes one more",
   "url": "https://patchgap.ai/incidents/firefox-159-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/firefox-159-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "firefox"
   ],
   "updated_at": "2026-11-03"
  },
  {
   "id": "emudhra-fake-website-certificates",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Fake website certificates: browsers and computers are blocking a certificate company's weak keys",
   "url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates/",
   "json_url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates.json",
   "status": "partial",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "chrome",
    "firefox",
    "edge",
    "windows",
    "macos",
    "tailscale"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "teamviewer-15-83-security-update",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "TeamViewer: update to version 15.83. A bad remote session could run code on your computer.",
   "url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update/",
   "json_url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "teamviewer"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "zoom-october-2026-security-bulletins",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Zoom: update to 7.2.0 or newer to fix bugs that could leak your data or crash the app",
   "url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins/",
   "json_url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "zoom"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "plex-media-server-plex2shell-attacks",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Plex Media Server: hackers are chaining bugs to break in. Update to 1.43.3 or newer.",
   "url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks/",
   "json_url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "plex-media-server"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "tailscale-ssh-flaws-tailworm",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Tailscale SSH: serious bugs are now fixed in Tailscale 1.104.4. Update now.",
   "url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm/",
   "json_url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "tailscale"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "popcorn-time-time4popcorn-dead-updater",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Popcorn Time (Time4Popcorn): the app's updater is open to takeover. There is no fix. Remove it.",
   "url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater/",
   "json_url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater.json",
   "status": "no-patch",
   "exploited_in_wild": "unknown",
   "severity": "critical",
   "products": [
    "time4popcorn"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "electrum-wallet-fake-server-fee-bump-theft",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Electrum Bitcoin wallet: bad servers can trick you into paying a thief. Update to 4.8.3.",
   "url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft/",
   "json_url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "electrum"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "fearless-wallet-extension-leaks-private-keys",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Fearless Wallet browser add-on stole users' wallet keys. There is no safe version.",
   "url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys/",
   "json_url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys.json",
   "status": "no-patch",
   "exploited_in_wild": "yes",
   "severity": "critical",
   "products": [
    "fearless-wallet-extension"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "signal-desktop-call-hang-up-bug",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Signal Desktop: update so calls end when you hang up",
   "url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug/",
   "json_url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "critical",
   "products": [
    "signal-desktop"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "telegram-desktop-link-account-takeover",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Telegram Desktop: clicking a bad link could let someone take over your account. Update to 7.2.9 or newer.",
   "url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover/",
   "json_url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "telegram-desktop"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "claude-code-plugin-hash-pin-bypass",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Claude Code: a bad plugin could sneak in code even when you pinned a safe version. Update to 2.1.179.",
   "url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass/",
   "json_url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "claude-code"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "opencode-windows-sign-in-code-run",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "OpenCode AI helper on Windows: a bad connected tool could run code when you sign in",
   "url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run/",
   "json_url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "opencode"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "netgear-router-and-extender-fixes-oct-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "NETGEAR routers and extenders: update your router's firmware (some older models will not get a fix)",
   "url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026.json",
   "status": "partial",
   "exploited_in_wild": "unknown",
   "severity": "medium",
   "products": [
    "netgear-routers"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "iphone-ads-and-hijacked-tags-spyware",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "iPhone: criminals are using bad ads and old website tags to attack iPhones that are not updated",
   "url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware/",
   "json_url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "microsoft-authenticator-android-token-bug",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Authenticator on Android: update the app. A bug could let another app get work-account sign-ins.",
   "url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug/",
   "json_url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "microsoft-authenticator"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-oct-2025",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the October 2025 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-nov-2025",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the November 2025 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-dec-2025",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the December 2025 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-jan-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the January 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-feb-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the February 2026 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-apr-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the April 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-aug-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the August 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-sep-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the September 2026 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "microsoft-defender-attacked-bugs-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: three bugs in Microsoft Defender, the built-in antivirus, were used in real attacks",
   "url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026/",
   "json_url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-attacked-bug-jan-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Office: a bug that lets a bad document skip Office's safety checks was used in real attacks",
   "url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-word-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Word: a bug that lets a bad document skip a safety check was used in real attacks",
   "url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-nov-2025",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Nov 2025): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-dec-2025",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Dec 2025): a bug in the part that draws graphics (ANGLE) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Feb 2026): a bug in the part that handles page styles (CSS) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-mar-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Mar 2026): bugs in the parts that run website code (V8) and draw images (Skia) were used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-apr-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Mar 2026): a bug in the part that handles 3D graphics (Dawn) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-jun-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Jun 2026): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-sep-2026-a",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Sep 2026, first fix): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-sep-2026-b",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Sep 2026, second fix): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-attacked-bugs-nov-2025",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac, iPhone and iPad: two bugs fixed in November 2025 were later found in real attacks",
   "url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-webkit-attacked-bug-dec-2025",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Safari, Mac and iPhone: a web page bug was used in targeted attacks",
   "url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "safari",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac and iPhone: a core system bug was used in targeted attacks",
   "url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "macos-screen-sharing-attacked-bug-aug-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac: a Screen Sharing bug let attackers on the network get in without a password",
   "url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "adobe-reader-attacked-bug-apr-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Adobe Acrobat Reader: a bad PDF could take over your computer, and it was used in real attacks",
   "url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "critical",
   "products": [
    "adobe-reader"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "notepad-plus-plus-updater-hijack-2026",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Notepad++: its old updater could be tricked into installing a fake update, and attackers did it",
   "url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026/",
   "json_url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "notepad-plus-plus"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "winrar-attacked-path-bugs-2025",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "WinRAR: opening a bad archive could drop a hidden program on your PC, and attackers used it",
   "url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025/",
   "json_url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "winrar"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-157-nov-3-security-fixes",
   "change": "updated",
   "at": "2026-11-06T12:10:11Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome 157 fixes 213 security bugs (Nov 3). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-11-03"
  },
  {
   "id": "apple-webkit-pointer-auth-cve-2024-27834",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac, Safari, and iPhone: CISA says an old Apple bug is being used in real attacks. Update if you missed May 2024 fixes.",
   "url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "safari",
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-11-04"
  },
  {
   "id": "chrome-156-oct-29-security-fixes",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome update fixes 21 more security bugs (Oct 29). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-29"
  },
  {
   "id": "chrome-156-oct-27-security-fixes",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome update fixes 52 more security bugs (Oct 27). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "windows-shell-zero-day-oct-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug that lets a bad file skip Windows' safety warnings is being used by hackers",
   "url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-october-2026-updates",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Office (Word, Excel, Outlook): update to get 164 security fixes",
   "url": "https://patchgap.ai/incidents/office-october-2026-updates/",
   "json_url": "https://patchgap.ai/incidents/office-october-2026-updates.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-secure-boot-blackx-bootkit",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a hidden start-up virus (BlackX) works even on updated PCs, unless one extra step is done",
   "url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit/",
   "json_url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit.json",
   "status": "partial",
   "exploited_in_wild": "yes",
   "severity": "medium",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "macos-27-2-security-updates-oct-26",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac: macOS and Safari updates out today fix hundreds of security bugs",
   "url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "macos",
    "safari"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "iphone-ios-27-2-security-updates-oct-26",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "iPhone and iPad: October 26 updates fix hundreds of security bugs",
   "url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "iphone-ios"
   ],
   "updated_at": "2026-11-05"
  },
  {
   "id": "macos-coregraphics-zero-day-sept-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac and iPhone: a bad file could take over your device, and Apple says it was used in real attacks",
   "url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "chrome-156-security-fixes",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome 156 fixes 353 security bugs. Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "firefox-159-security-fixes",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Firefox 159 fixes 167 security bugs, and 159.0.1 fixes one more",
   "url": "https://patchgap.ai/incidents/firefox-159-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/firefox-159-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "firefox"
   ],
   "updated_at": "2026-11-03"
  },
  {
   "id": "emudhra-fake-website-certificates",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Fake website certificates: browsers and computers are blocking a certificate company's weak keys",
   "url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates/",
   "json_url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates.json",
   "status": "partial",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "chrome",
    "firefox",
    "edge",
    "windows",
    "macos",
    "tailscale"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "teamviewer-15-83-security-update",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "TeamViewer: update to version 15.83. A bad remote session could run code on your computer.",
   "url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update/",
   "json_url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "teamviewer"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "zoom-october-2026-security-bulletins",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Zoom: update to 7.2.0 or newer to fix bugs that could leak your data or crash the app",
   "url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins/",
   "json_url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "zoom"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "plex-media-server-plex2shell-attacks",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Plex Media Server: hackers are chaining bugs to break in. Update to 1.43.3 or newer.",
   "url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks/",
   "json_url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "plex-media-server"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "tailscale-ssh-flaws-tailworm",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Tailscale SSH: serious bugs are now fixed in Tailscale 1.104.4. Update now.",
   "url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm/",
   "json_url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "tailscale"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "popcorn-time-time4popcorn-dead-updater",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Popcorn Time (Time4Popcorn): the app's updater is open to takeover. There is no fix. Remove it.",
   "url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater/",
   "json_url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater.json",
   "status": "no-patch",
   "exploited_in_wild": "unknown",
   "severity": "critical",
   "products": [
    "time4popcorn"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "electrum-wallet-fake-server-fee-bump-theft",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Electrum Bitcoin wallet: bad servers can trick you into paying a thief. Update to 4.8.3.",
   "url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft/",
   "json_url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "electrum"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "fearless-wallet-extension-leaks-private-keys",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Fearless Wallet browser add-on stole users' wallet keys. There is no safe version.",
   "url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys/",
   "json_url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys.json",
   "status": "no-patch",
   "exploited_in_wild": "yes",
   "severity": "critical",
   "products": [
    "fearless-wallet-extension"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "signal-desktop-call-hang-up-bug",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Signal Desktop: update so calls end when you hang up",
   "url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug/",
   "json_url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "critical",
   "products": [
    "signal-desktop"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "telegram-desktop-link-account-takeover",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Telegram Desktop: clicking a bad link could let someone take over your account. Update to 7.2.9 or newer.",
   "url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover/",
   "json_url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "telegram-desktop"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "claude-code-plugin-hash-pin-bypass",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Claude Code: a bad plugin could sneak in code even when you pinned a safe version. Update to 2.1.179.",
   "url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass/",
   "json_url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "claude-code"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "opencode-windows-sign-in-code-run",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "OpenCode AI helper on Windows: a bad connected tool could run code when you sign in",
   "url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run/",
   "json_url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "opencode"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "netgear-router-and-extender-fixes-oct-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "NETGEAR routers and extenders: update your router's firmware (some older models will not get a fix)",
   "url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026.json",
   "status": "partial",
   "exploited_in_wild": "unknown",
   "severity": "medium",
   "products": [
    "netgear-routers"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "iphone-ads-and-hijacked-tags-spyware",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "iPhone: criminals are using bad ads and old website tags to attack iPhones that are not updated",
   "url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware/",
   "json_url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "microsoft-authenticator-android-token-bug",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Authenticator on Android: update the app. A bug could let another app get work-account sign-ins.",
   "url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug/",
   "json_url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "microsoft-authenticator"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-oct-2025",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the October 2025 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-nov-2025",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the November 2025 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-dec-2025",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the December 2025 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-jan-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the January 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-feb-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the February 2026 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-apr-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the April 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-aug-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: a bug fixed in the August 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-sep-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: bugs fixed in the September 2026 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "microsoft-defender-attacked-bugs-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Windows: three bugs in Microsoft Defender, the built-in antivirus, were used in real attacks",
   "url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026/",
   "json_url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-attacked-bug-jan-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Office: a bug that lets a bad document skip Office's safety checks was used in real attacks",
   "url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-word-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Microsoft Word: a bug that lets a bad document skip a safety check was used in real attacks",
   "url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-nov-2025",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Nov 2025): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-dec-2025",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Dec 2025): a bug in the part that draws graphics (ANGLE) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Feb 2026): a bug in the part that handles page styles (CSS) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-mar-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Mar 2026): bugs in the parts that run website code (V8) and draw images (Skia) were used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-apr-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Mar 2026): a bug in the part that handles 3D graphics (Dawn) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-jun-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Jun 2026): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-sep-2026-a",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Sep 2026, first fix): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-sep-2026-b",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Chrome and Edge (Sep 2026, second fix): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-attacked-bugs-nov-2025",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac, iPhone and iPad: two bugs fixed in November 2025 were later found in real attacks",
   "url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-webkit-attacked-bug-dec-2025",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Safari, Mac and iPhone: a web page bug was used in targeted attacks",
   "url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "safari",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-attacked-bug-feb-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac and iPhone: a core system bug was used in targeted attacks",
   "url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "macos-screen-sharing-attacked-bug-aug-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Mac: a Screen Sharing bug let attackers on the network get in without a password",
   "url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "adobe-reader-attacked-bug-apr-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Adobe Acrobat Reader: a bad PDF could take over your computer, and it was used in real attacks",
   "url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "critical",
   "products": [
    "adobe-reader"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "notepad-plus-plus-updater-hijack-2026",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Notepad++: its old updater could be tricked into installing a fake update, and attackers did it",
   "url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026/",
   "json_url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "notepad-plus-plus"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "winrar-attacked-path-bugs-2025",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "WinRAR: opening a bad archive could drop a hidden program on your PC, and attackers used it",
   "url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025/",
   "json_url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "winrar"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-157-nov-3-security-fixes",
   "change": "updated",
   "at": "2026-11-06T08:15:16Z",
   "changed_fields": [
    "last_checked"
   ],
   "title": "Google Chrome 157 fixes 213 security bugs (Nov 3). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-11-03"
  },
  {
   "id": "iphone-ios-27-2-security-updates-oct-26",
   "change": "added",
   "at": "2026-11-05T12:03:03Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "iPhone and iPad: October 26 updates fix hundreds of security bugs",
   "url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "iphone-ios"
   ],
   "updated_at": "2026-11-05"
  },
  {
   "id": "apple-webkit-pointer-auth-cve-2024-27834",
   "change": "added",
   "at": "2026-11-05T00:31:58Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Mac, Safari, and iPhone: CISA says an old Apple bug is being used in real attacks. Update if you missed May 2024 fixes.",
   "url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "safari",
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-11-04"
  },
  {
   "id": "chrome-157-nov-3-security-fixes",
   "change": "added",
   "at": "2026-11-04T00:09:22Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Google Chrome 157 fixes 213 security bugs (Nov 3). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-11-03"
  },
  {
   "id": "firefox-159-security-fixes",
   "change": "updated",
   "at": "2026-11-03T16:06:35Z",
   "changed_fields": [
    "action",
    "affected",
    "am_i_affected",
    "cves",
    "sources",
    "summary",
    "title"
   ],
   "title": "Firefox 159 fixes 167 security bugs, and 159.0.1 fixes one more",
   "url": "https://patchgap.ai/incidents/firefox-159-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/firefox-159-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "firefox"
   ],
   "updated_at": "2026-11-03"
  },
  {
   "id": "chrome-156-oct-29-security-fixes",
   "change": "added",
   "at": "2026-10-29T23:06:06Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Google Chrome update fixes 21 more security bugs (Oct 29). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-29"
  },
  {
   "id": "macos-coregraphics-zero-day-sept-2026",
   "change": "updated",
   "at": "2026-10-28T15:16:58Z",
   "changed_fields": [
    "action",
    "affected",
    "am_i_affected",
    "fix_steps",
    "patch_links",
    "platforms",
    "products",
    "sources",
    "summary",
    "title"
   ],
   "title": "Mac and iPhone: a bad file could take over your device, and Apple says it was used in real attacks",
   "url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "chrome-156-oct-27-security-fixes",
   "change": "added",
   "at": "2026-10-28T13:39:31Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Google Chrome update fixes 52 more security bugs (Oct 27). Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "tailscale-ssh-flaws-tailworm",
   "change": "updated",
   "at": "2026-10-28T13:39:31Z",
   "changed_fields": [
    "action",
    "affected",
    "am_i_affected",
    "exploited",
    "fix_steps",
    "patch_links",
    "severity_source",
    "sources",
    "status",
    "summary",
    "title"
   ],
   "title": "Tailscale SSH: serious bugs are now fixed in Tailscale 1.104.4. Update now.",
   "url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm/",
   "json_url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "tailscale"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "chrome-attacked-bug-sep-2026-a",
   "change": "added",
   "at": "2026-10-27T20:41:23Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Chrome and Edge (Sep 2026, first fix): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-sep-2026-b",
   "change": "added",
   "at": "2026-10-27T20:41:23Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Chrome and Edge (Sep 2026, second fix): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-nov-2025",
   "change": "added",
   "at": "2026-10-27T20:41:10Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Chrome and Edge (Nov 2025): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-dec-2025",
   "change": "added",
   "at": "2026-10-27T20:41:10Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Chrome and Edge (Dec 2025): a bug in the part that draws graphics (ANGLE) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-feb-2026",
   "change": "added",
   "at": "2026-10-27T20:41:10Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Chrome and Edge (Feb 2026): a bug in the part that handles page styles (CSS) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-mar-2026",
   "change": "added",
   "at": "2026-10-27T20:41:10Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Chrome and Edge (Mar 2026): bugs in the parts that run website code (V8) and draw images (Skia) were used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-apr-2026",
   "change": "added",
   "at": "2026-10-27T20:41:10Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Chrome and Edge (Mar 2026): a bug in the part that handles 3D graphics (Dawn) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "chrome-attacked-bug-jun-2026",
   "change": "added",
   "at": "2026-10-27T20:41:10Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Chrome and Edge (Jun 2026): a bug in the part that runs website code (V8) was used in real attacks",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "chrome",
    "edge"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-oct-2025",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Windows: bugs fixed in the October 2025 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-nov-2025",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Windows: bugs fixed in the November 2025 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-dec-2025",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Windows: a bug fixed in the December 2025 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-jan-2026",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Windows: a bug fixed in the January 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-feb-2026",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Windows: bugs fixed in the February 2026 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-apr-2026",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Windows: a bug fixed in the April 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-aug-2026",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Windows: a bug fixed in the August 2026 update was used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-attacked-bugs-sep-2026",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Windows: bugs fixed in the September 2026 update were used in real attacks",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "microsoft-defender-attacked-bugs-2026",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Windows: three bugs in Microsoft Defender, the built-in antivirus, were used in real attacks",
   "url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026/",
   "json_url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-attacked-bug-jan-2026",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Microsoft Office: a bug that lets a bad document skip Office's safety checks was used in real attacks",
   "url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-word-attacked-bug-feb-2026",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Microsoft Word: a bug that lets a bad document skip a safety check was used in real attacks",
   "url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-attacked-bugs-nov-2025",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Mac, iPhone and iPad: two bugs fixed in November 2025 were later found in real attacks",
   "url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-webkit-attacked-bug-dec-2025",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Safari, Mac and iPhone: a web page bug was used in targeted attacks",
   "url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "safari",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "apple-attacked-bug-feb-2026",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Mac and iPhone: a core system bug was used in targeted attacks",
   "url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "macos-screen-sharing-attacked-bug-aug-2026",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Mac: a Screen Sharing bug let attackers on the network get in without a password",
   "url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "adobe-reader-attacked-bug-apr-2026",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Adobe Acrobat Reader: a bad PDF could take over your computer, and it was used in real attacks",
   "url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "critical",
   "products": [
    "adobe-reader"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "notepad-plus-plus-updater-hijack-2026",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Notepad++: its old updater could be tricked into installing a fake update, and attackers did it",
   "url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026/",
   "json_url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "notepad-plus-plus"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "winrar-attacked-path-bugs-2025",
   "change": "added",
   "at": "2026-10-27T20:41:04Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "WinRAR: opening a bad archive could drop a hidden program on your PC, and attackers used it",
   "url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025/",
   "json_url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "winrar"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-shell-zero-day-oct-2026",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Windows: a bug that lets a bad file skip Windows' safety warnings is being used by hackers",
   "url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "office-october-2026-updates",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Microsoft Office (Word, Excel, Outlook): update to get 164 security fixes",
   "url": "https://patchgap.ai/incidents/office-october-2026-updates/",
   "json_url": "https://patchgap.ai/incidents/office-october-2026-updates.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "microsoft-office"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "windows-secure-boot-blackx-bootkit",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Windows: a hidden start-up virus (BlackX) works even on updated PCs, unless one extra step is done",
   "url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit/",
   "json_url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit.json",
   "status": "partial",
   "exploited_in_wild": "yes",
   "severity": "medium",
   "products": [
    "windows"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "macos-27-2-security-updates-oct-26",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Mac: macOS and Safari updates out today fix hundreds of security bugs",
   "url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "macos",
    "safari"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "macos-coregraphics-zero-day-sept-2026",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Mac and iPhone: a bad file could take over your device, and Apple says it was used in real attacks",
   "url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "macos",
    "iphone-ios"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "chrome-156-security-fixes",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Google Chrome 156 fixes 353 security bugs. Restart Chrome to get it.",
   "url": "https://patchgap.ai/incidents/chrome-156-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "chrome"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "firefox-159-security-fixes",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Firefox 159 fixes 167 security bugs, and 159.0.1 fixes one more",
   "url": "https://patchgap.ai/incidents/firefox-159-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/firefox-159-security-fixes.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "firefox"
   ],
   "updated_at": "2026-11-03"
  },
  {
   "id": "emudhra-fake-website-certificates",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Fake website certificates: browsers and computers are blocking a certificate company's weak keys",
   "url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates/",
   "json_url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates.json",
   "status": "partial",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "chrome",
    "firefox",
    "edge",
    "windows",
    "macos",
    "tailscale"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "teamviewer-15-83-security-update",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "TeamViewer: update to version 15.83. A bad remote session could run code on your computer.",
   "url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update/",
   "json_url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "high",
   "products": [
    "teamviewer"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "zoom-october-2026-security-bulletins",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Zoom: update to 7.2.0 or newer to fix bugs that could leak your data or crash the app",
   "url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins/",
   "json_url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "zoom"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "plex-media-server-plex2shell-attacks",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Plex Media Server: hackers are chaining bugs to break in. Update to 1.43.3 or newer.",
   "url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks/",
   "json_url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "plex-media-server"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "tailscale-ssh-flaws-tailworm",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Tailscale SSH: serious bugs are now fixed in Tailscale 1.104.4. Update now.",
   "url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm/",
   "json_url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "tailscale"
   ],
   "updated_at": "2026-10-28"
  },
  {
   "id": "popcorn-time-time4popcorn-dead-updater",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Popcorn Time (Time4Popcorn): the app's updater is open to takeover. There is no fix. Remove it.",
   "url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater/",
   "json_url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater.json",
   "status": "no-patch",
   "exploited_in_wild": "unknown",
   "severity": "critical",
   "products": [
    "time4popcorn"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "electrum-wallet-fake-server-fee-bump-theft",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Electrum Bitcoin wallet: bad servers can trick you into paying a thief. Update to 4.8.3.",
   "url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft/",
   "json_url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "electrum"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "fearless-wallet-extension-leaks-private-keys",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Fearless Wallet browser add-on stole users' wallet keys. There is no safe version.",
   "url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys/",
   "json_url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys.json",
   "status": "no-patch",
   "exploited_in_wild": "yes",
   "severity": "critical",
   "products": [
    "fearless-wallet-extension"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "signal-desktop-call-hang-up-bug",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Signal Desktop: update so calls end when you hang up",
   "url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug/",
   "json_url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "critical",
   "products": [
    "signal-desktop"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "telegram-desktop-link-account-takeover",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Telegram Desktop: clicking a bad link could let someone take over your account. Update to 7.2.9 or newer.",
   "url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover/",
   "json_url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "telegram-desktop"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "claude-code-plugin-hash-pin-bypass",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Claude Code: a bad plugin could sneak in code even when you pinned a safe version. Update to 2.1.179.",
   "url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass/",
   "json_url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "claude-code"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "opencode-windows-sign-in-code-run",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "OpenCode AI helper on Windows: a bad connected tool could run code when you sign in",
   "url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run/",
   "json_url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run.json",
   "status": "patched",
   "exploited_in_wild": "no",
   "severity": "critical",
   "products": [
    "opencode"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "netgear-router-and-extender-fixes-oct-2026",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "NETGEAR routers and extenders: update your router's firmware (some older models will not get a fix)",
   "url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026.json",
   "status": "partial",
   "exploited_in_wild": "unknown",
   "severity": "medium",
   "products": [
    "netgear-routers"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "iphone-ads-and-hijacked-tags-spyware",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "iPhone: criminals are using bad ads and old website tags to attack iPhones that are not updated",
   "url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware/",
   "json_url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware.json",
   "status": "patched",
   "exploited_in_wild": "yes",
   "severity": "high",
   "products": [
    "iphone-ios"
   ],
   "updated_at": "2026-10-27"
  },
  {
   "id": "microsoft-authenticator-android-token-bug",
   "change": "added",
   "at": "2026-10-27T18:00:38Z",
   "changed_fields": [
    "new incident"
   ],
   "title": "Microsoft Authenticator on Android: update the app. A bug could let another app get work-account sign-ins.",
   "url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug/",
   "json_url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug.json",
   "status": "patched",
   "exploited_in_wild": "unknown",
   "severity": "high",
   "products": [
    "microsoft-authenticator"
   ],
   "updated_at": "2026-10-27"
  }
 ]
}