Last checked ยท Check before installing; only use the official link.
- Google Chrome 157 fixes 213 security bugs (Nov 3). Restart Chrome to get it. Patched: update now updated Nov 3, 2026
- Google Chrome update fixes 21 more security bugs (Oct 29). Restart Chrome to get it. Patched: update now updated Oct 29, 2026
- Google Chrome update fixes 52 more security bugs (Oct 27). Restart Chrome to get it. Patched: update now updated Oct 28, 2026
- Firefox 159 fixes 167 security bugs, and 159.0.1 fixes one more Patched: update now updated Nov 3, 2026
- TeamViewer: update to version 15.83. A bad remote session could run code on your computer. Patched: update now updated Oct 27, 2026
- Mac: macOS and Safari updates out today fix hundreds of security bugs Patched: update now updated Oct 27, 2026
- iPhone and iPad: October 26 updates fix hundreds of security bugs Patched: update now updated Nov 5, 2026
- Tailscale SSH: serious bugs are now fixed in Tailscale 1.104.4. Update now. Patched: update now updated Oct 28, 2026
- Electrum Bitcoin wallet: bad servers can trick you into paying a thief. Update to 4.8.3. Patched: update now Being attacked now updated Oct 27, 2026
- Windows: a hidden start-up virus (BlackX) works even on updated PCs, unless one extra step is done Partly patched Being attacked now updated Oct 27, 2026
- Fearless Wallet browser add-on stole users' wallet keys. There is no safe version. No patch yet Being attacked now updated Oct 27, 2026
- iPhone: criminals are using bad ads and old website tags to attack iPhones that are not updated Patched: update now Being attacked now updated Oct 27, 2026
- Plex Media Server: hackers are chaining bugs to break in. Update to 1.43.3 or newer. Patched: update now Being attacked now updated Oct 27, 2026
- Google Chrome 156 fixes 353 security bugs. Restart Chrome to get it. Patched: update now updated Oct 27, 2026
- Signal Desktop: update so calls end when you hang up Patched: update now updated Oct 27, 2026
- OpenCode AI helper on Windows: a bad connected tool could run code when you sign in Patched: update now updated Oct 27, 2026
- Fake website certificates: browsers and computers are blocking a certificate company's weak keys Partly patched updated Oct 27, 2026
- Windows: a bug that lets a bad file skip Windows' safety warnings is being used by hackers Patched: update now Being attacked now updated Oct 27, 2026
- Microsoft Office (Word, Excel, Outlook): update to get 164 security fixes Patched: update now updated Oct 27, 2026
- Zoom: update to 7.2.0 or newer to fix bugs that could leak your data or crash the app Patched: update now updated Oct 27, 2026
- Claude Code: a bad plugin could sneak in code even when you pinned a safe version. Update to 2.1.179. Patched: update now updated Oct 27, 2026
- NETGEAR routers and extenders: update your router's firmware (some older models will not get a fix) Partly patched updated Oct 27, 2026
- Telegram Desktop: clicking a bad link could let someone take over your account. Update to 7.2.9 or newer. Patched: update now updated Oct 27, 2026
- Mac and iPhone: a bad file could take over your device, and Apple says it was used in real attacks Patched: update now Being attacked now updated Oct 28, 2026
- Windows: bugs fixed in the September 2026 update were used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Chrome and Edge (Sep 2026, second fix): a bug in the part that runs website code (V8) was used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Microsoft Authenticator on Android: update the app. A bug could let another app get work-account sign-ins. Patched: update now updated Oct 27, 2026
- Chrome and Edge (Sep 2026, first fix): a bug in the part that runs website code (V8) was used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Popcorn Time (Time4Popcorn): the app's updater is open to takeover. There is no fix. Remove it. No patch yet updated Oct 27, 2026
- Windows: a bug fixed in the August 2026 update was used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Mac: a Screen Sharing bug let attackers on the network get in without a password Patched: update now Being attacked now updated Oct 27, 2026
- Chrome and Edge (Jun 2026): a bug in the part that runs website code (V8) was used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Windows: a bug fixed in the April 2026 update was used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Windows: three bugs in Microsoft Defender, the built-in antivirus, were used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Adobe Acrobat Reader: a bad PDF could take over your computer, and it was used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Chrome and Edge (Mar 2026): a bug in the part that handles 3D graphics (Dawn) was used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Chrome and Edge (Mar 2026): bugs in the parts that run website code (V8) and draw images (Skia) were used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Chrome and Edge (Feb 2026): a bug in the part that handles page styles (CSS) was used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Mac and iPhone: a core system bug was used in targeted attacks Patched: update now Being attacked now updated Oct 27, 2026
- Windows: bugs fixed in the February 2026 update were used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Microsoft Word: a bug that lets a bad document skip a safety check was used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Notepad++: its old updater could be tricked into installing a fake update, and attackers did it Patched: update now Being attacked now updated Oct 27, 2026
- Microsoft Office: a bug that lets a bad document skip Office's safety checks was used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Windows: a bug fixed in the January 2026 update was used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Safari, Mac and iPhone: a web page bug was used in targeted attacks Patched: update now Being attacked now updated Oct 27, 2026
- Chrome and Edge (Dec 2025): a bug in the part that draws graphics (ANGLE) was used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Windows: a bug fixed in the December 2025 update was used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Chrome and Edge (Nov 2025): a bug in the part that runs website code (V8) was used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Windows: bugs fixed in the November 2025 update were used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Mac, iPhone and iPad: two bugs fixed in November 2025 were later found in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- Windows: bugs fixed in the October 2025 update were used in real attacks Patched: update now Being attacked now updated Oct 27, 2026
- WinRAR: opening a bad archive could drop a hidden program on your PC, and attackers used it Patched: update now Being attacked now updated Oct 27, 2026
- Mac, Safari, and iPhone: CISA says an old Apple bug is being used in real attacks. Update if you missed May 2024 fixes. Patched: update now Being attacked now updated Nov 4, 2026