{
 "schema_version": "1.0",
 "platform": "Mac",
 "last_checked": "2026-11-07T17:33:08+00:00",
 "feed_version": "33bc46697a791b5a",
 "rules": [
  "Use only read-only checks (the commands marked read_only, or the app's own About menu). Never run anything that changes the computer.",
  "Never install, update, uninstall or change settings without the user's clear OK for that exact step.",
  "Only give the user the official links in this feed (official_patch_links and sources). Never send them to a download from anywhere else.",
  "If you cannot tell whether the user is affected, say so plainly instead of guessing.",
  "Say 'unconfirmed' when an incident's confidence is 'unconfirmed'."
 ],
 "products": [
  {
   "slug": "macos",
   "product": "macOS",
   "minimum_safe_version": null,
   "newest_fix": "27.2 (Golden Gate) / 26.7.2 (Tahoe) / 15.8.2 (Sequoia)",
   "summary": "There is no single version number for Mac. The newest fix listed here is: 27.2 (Golden Gate) / 26.7.2 (Tahoe) / 15.8.2 (Sequoia). If you have that or anything newer, you're covered against the fixed problems listed here (see the notes below).",
   "check_menu": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
   "check_command": "sw_vers -productVersion",
   "shell": "Terminal",
   "read_only": true,
   "official_update": "https://support.apple.com/en-us/108382",
   "open_urgent": [
    {
     "id": "macos-coregraphics-zero-day-sept-2026",
     "title": "Mac and iPhone: a bad file could take over your device, and Apple says it was used in…",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026.json"
    },
    {
     "id": "macos-screen-sharing-attacked-bug-aug-2026",
     "title": "Mac: a Screen Sharing bug let attackers on the network get in without a password",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026.json"
    },
    {
     "id": "apple-attacked-bug-feb-2026",
     "title": "Mac and iPhone: a core system bug was used in targeted attacks",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026.json"
    },
    {
     "id": "apple-webkit-attacked-bug-dec-2025",
     "title": "Safari, Mac and iPhone: a web page bug was used in targeted attacks",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025.json"
    },
    {
     "id": "apple-attacked-bugs-nov-2025",
     "title": "Mac, iPhone and iPad: two bugs fixed in November 2025 were later found in real attacks",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025.json"
    }
   ],
   "json_url": "https://patchgap.ai/products/macos.json"
  },
  {
   "slug": "safari",
   "product": "Safari",
   "minimum_safe_version": "26.2",
   "newest_fix": null,
   "summary": "You're covered against every problem here that has a version number if you're on Safari 26.2 or newer.",
   "check_menu": "Open Safari. Menu bar: Safari > About Safari.",
   "check_command": "mdls -name kMDItemVersion \"/Applications/Safari.app\"",
   "shell": "Terminal",
   "read_only": true,
   "official_update": "https://support.apple.com/en-us/108382",
   "open_urgent": [
    {
     "id": "apple-webkit-attacked-bug-dec-2025",
     "title": "Safari, Mac and iPhone: a web page bug was used in targeted attacks",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025.json"
    },
    {
     "id": "apple-webkit-pointer-auth-cve-2024-27834",
     "title": "Mac, Safari, and iPhone: CISA says an old Apple bug is being used in real attacks.…",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834.json"
    }
   ],
   "json_url": "https://patchgap.ai/products/safari.json"
  },
  {
   "slug": "chrome",
   "product": "Google Chrome",
   "minimum_safe_version": "157.0.8103.38",
   "newest_fix": null,
   "summary": "You're covered against every problem here that has a version number if you're on Chrome 157.0.8103.38 or newer.",
   "check_menu": "Chrome menu bar: Chrome > About Google Chrome.",
   "check_command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString",
   "shell": "Terminal",
   "read_only": true,
   "official_update": "https://support.google.com/chrome/answer/95414",
   "open_urgent": [
    {
     "id": "chrome-attacked-bug-sep-2026-b",
     "title": "Chrome and Edge (Sep 2026, second fix): a bug in the part that runs website code (V8)…",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b.json"
    },
    {
     "id": "chrome-attacked-bug-sep-2026-a",
     "title": "Chrome and Edge (Sep 2026, first fix): a bug in the part that runs website code (V8) was…",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a.json"
    },
    {
     "id": "chrome-attacked-bug-jun-2026",
     "title": "Chrome and Edge (Jun 2026): a bug in the part that runs website code (V8) was used in…",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026.json"
    },
    {
     "id": "chrome-attacked-bug-apr-2026",
     "title": "Chrome and Edge (Mar 2026): a bug in the part that handles 3D graphics (Dawn) was used…",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026.json"
    },
    {
     "id": "chrome-attacked-bug-mar-2026",
     "title": "Chrome and Edge (Mar 2026): bugs in the parts that run website code (V8) and draw images…",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026.json"
    }
   ],
   "json_url": "https://patchgap.ai/products/chrome.json"
  },
  {
   "slug": "firefox",
   "product": "Mozilla Firefox",
   "minimum_safe_version": null,
   "newest_fix": "159.0.1 (ESR: 153.6 or 115.44)",
   "summary": "There is no single version number for Firefox. The newest fix listed here is: 159.0.1 (ESR: 153.6 or 115.44). If you have that or anything newer, you're covered against the fixed problems listed here (see the notes below).",
   "check_menu": "Firefox menu bar: Firefox > About Firefox.",
   "check_command": "defaults read \"/Applications/Firefox.app/Contents/Info\" CFBundleShortVersionString",
   "shell": "Terminal",
   "read_only": true,
   "official_update": "https://www.mozilla.org/firefox/new/",
   "open_urgent": [
    {
     "id": "emudhra-fake-website-certificates",
     "title": "Fake website certificates: browsers and computers are blocking a certificate company's…",
     "status": "Partly patched",
     "being_attacked": false,
     "json_url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates.json"
    }
   ],
   "json_url": "https://patchgap.ai/products/firefox.json"
  },
  {
   "slug": "edge",
   "product": "Microsoft Edge",
   "minimum_safe_version": "152.0.4191.66",
   "newest_fix": null,
   "summary": "You're covered against every problem here that has a version number if you're on Edge 152.0.4191.66 or newer.",
   "check_menu": "Edge menu bar: Microsoft Edge > About Microsoft Edge.",
   "check_command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString",
   "shell": "Terminal",
   "read_only": true,
   "official_update": "https://www.microsoft.com/edge/download",
   "open_urgent": [
    {
     "id": "chrome-attacked-bug-sep-2026-b",
     "title": "Chrome and Edge (Sep 2026, second fix): a bug in the part that runs website code (V8)…",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b.json"
    },
    {
     "id": "chrome-attacked-bug-sep-2026-a",
     "title": "Chrome and Edge (Sep 2026, first fix): a bug in the part that runs website code (V8) was…",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a.json"
    },
    {
     "id": "chrome-attacked-bug-jun-2026",
     "title": "Chrome and Edge (Jun 2026): a bug in the part that runs website code (V8) was used in…",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026.json"
    },
    {
     "id": "chrome-attacked-bug-apr-2026",
     "title": "Chrome and Edge (Mar 2026): a bug in the part that handles 3D graphics (Dawn) was used…",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026.json"
    },
    {
     "id": "chrome-attacked-bug-mar-2026",
     "title": "Chrome and Edge (Mar 2026): bugs in the parts that run website code (V8) and draw images…",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026.json"
    }
   ],
   "json_url": "https://patchgap.ai/products/edge.json"
  },
  {
   "slug": "microsoft-office",
   "product": "Microsoft Office (Word, Excel, Outlook, PowerPoint)",
   "minimum_safe_version": null,
   "newest_fix": "Fixed in the October 2026 Office updates (Microsoft Update Guide lists the version).",
   "summary": "There is no single version number for Microsoft Office. The newest fix listed here is: Fixed in the October 2026 Office updates (Microsoft Update Guide lists the version). If you have that or anything newer, you're covered against the fixed problems listed here (see the notes below).",
   "check_menu": "Open Word. Menu bar: Word > About Word. Or Word > Check for Updates.",
   "check_command": "defaults read \"/Applications/Microsoft Word.app/Contents/Info\" CFBundleShortVersionString",
   "shell": "Terminal",
   "read_only": true,
   "official_update": "https://support.microsoft.com/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5",
   "open_urgent": [
    {
     "id": "office-word-attacked-bug-feb-2026",
     "title": "Microsoft Word: a bug that lets a bad document skip a safety check was used in real…",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026.json"
    },
    {
     "id": "office-attacked-bug-jan-2026",
     "title": "Microsoft Office: a bug that lets a bad document skip Office's safety checks was used in…",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026.json"
    }
   ],
   "json_url": "https://patchgap.ai/products/microsoft-office.json"
  },
  {
   "slug": "zoom",
   "product": "Zoom Workplace",
   "minimum_safe_version": null,
   "newest_fix": "7.2.0 (7.1.9 on its branch)",
   "summary": "There is no single version number for Zoom. The newest fix listed here is: 7.2.0 (7.1.9 on its branch). If you have that or anything newer, you're covered against the fixed problems listed here (see the notes below).",
   "check_menu": "Open Zoom. Menu bar: zoom.us > Check for Updates.",
   "check_command": "defaults read \"/Applications/zoom.us.app/Contents/Info\" CFBundleShortVersionString",
   "shell": "Terminal",
   "read_only": true,
   "official_update": "https://zoom.us/download",
   "open_urgent": [],
   "json_url": "https://patchgap.ai/products/zoom.json"
  },
  {
   "slug": "teamviewer",
   "product": "TeamViewer",
   "minimum_safe_version": "15.83",
   "newest_fix": null,
   "summary": "You're covered against everything listed here if you're on TeamViewer 15.83 or newer.",
   "check_menu": "Open TeamViewer. Menu bar: TeamViewer > About TeamViewer.",
   "check_command": "defaults read \"/Applications/TeamViewer.app/Contents/Info\" CFBundleShortVersionString",
   "shell": "Terminal",
   "read_only": true,
   "official_update": "https://www.teamviewer.com/download/",
   "open_urgent": [],
   "json_url": "https://patchgap.ai/products/teamviewer.json"
  },
  {
   "slug": "signal-desktop",
   "product": "Signal Desktop",
   "minimum_safe_version": "8.31.0",
   "newest_fix": null,
   "summary": "You're covered against everything listed here if you're on Signal 8.31.0 or newer.",
   "check_menu": "Open Signal. Menu bar: Signal > About Signal Desktop.",
   "check_command": "defaults read \"/Applications/Signal.app/Contents/Info\" CFBundleShortVersionString",
   "shell": "Terminal",
   "read_only": true,
   "official_update": "https://signal.org/download/",
   "open_urgent": [],
   "json_url": "https://patchgap.ai/products/signal-desktop.json"
  },
  {
   "slug": "telegram-desktop",
   "product": "Telegram Desktop",
   "minimum_safe_version": "7.2.9",
   "newest_fix": null,
   "summary": "You're covered against everything listed here if you're on Telegram 7.2.9 or newer.",
   "check_menu": "Open Telegram. Menu bar: Telegram > About Telegram.",
   "check_command": "defaults read \"/Applications/Telegram.app/Contents/Info\" CFBundleShortVersionString",
   "shell": "Terminal",
   "read_only": true,
   "official_update": "https://desktop.telegram.org/",
   "open_urgent": [],
   "json_url": "https://patchgap.ai/products/telegram-desktop.json"
  },
  {
   "slug": "plex-media-server",
   "product": "Plex Media Server",
   "minimum_safe_version": "1.43.3",
   "newest_fix": null,
   "summary": "You're covered against everything listed here if you're on Plex 1.43.3 or newer.",
   "check_menu": "Look for the Plex Media Server icon in the menu bar and open its About window.",
   "check_command": "defaults read \"/Applications/Plex Media Server.app/Contents/Info\" CFBundleShortVersionString",
   "shell": "Terminal",
   "read_only": true,
   "official_update": "https://www.plex.tv/media-server-downloads/",
   "open_urgent": [
    {
     "id": "plex-media-server-plex2shell-attacks",
     "title": "Plex Media Server: hackers are chaining bugs to break in. Update to 1.43.3 or newer.",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks.json"
    }
   ],
   "json_url": "https://patchgap.ai/products/plex-media-server.json"
  },
  {
   "slug": "tailscale",
   "product": "Tailscale",
   "minimum_safe_version": "1.104.4",
   "newest_fix": null,
   "summary": "You're covered against every problem here that has a version number if you're on Tailscale 1.104.4 or newer.",
   "check_menu": "Click the Tailscale icon in the menu bar > About Tailscale.",
   "check_command": "tailscale version",
   "shell": "Terminal",
   "read_only": true,
   "official_update": "https://tailscale.com/download",
   "open_urgent": [
    {
     "id": "emudhra-fake-website-certificates",
     "title": "Fake website certificates: browsers and computers are blocking a certificate company's…",
     "status": "Partly patched",
     "being_attacked": false,
     "json_url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates.json"
    }
   ],
   "json_url": "https://patchgap.ai/products/tailscale.json"
  },
  {
   "slug": "electrum",
   "product": "Electrum",
   "minimum_safe_version": "4.8.3",
   "newest_fix": null,
   "summary": "You're covered against everything listed here if you're on Electrum 4.8.3 or newer.",
   "check_menu": "Open Electrum. Click Help > About Electrum.",
   "check_command": "defaults read \"/Applications/Electrum.app/Contents/Info\" CFBundleShortVersionString",
   "shell": "Terminal",
   "read_only": true,
   "official_update": "https://electrum.org/#download",
   "open_urgent": [
    {
     "id": "electrum-wallet-fake-server-fee-bump-theft",
     "title": "Electrum Bitcoin wallet: bad servers can trick you into paying a thief. Update to 4.8.3.",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft.json"
    }
   ],
   "json_url": "https://patchgap.ai/products/electrum.json"
  },
  {
   "slug": "fearless-wallet-extension",
   "product": "Fearless Wallet browser extension",
   "minimum_safe_version": null,
   "newest_fix": null,
   "summary": "No version of Fearless Wallet is safe from everything listed here yet. Follow the steps on each problem's page.",
   "check_menu": "In Chrome, open chrome://extensions and look for Fearless Wallet. Click Details to see the version. In Firefox, open about:addons.",
   "check_command": null,
   "shell": null,
   "read_only": null,
   "official_update": null,
   "open_urgent": [
    {
     "id": "fearless-wallet-extension-leaks-private-keys",
     "title": "Fearless Wallet browser add-on stole users' wallet keys. There is no safe version.",
     "status": "No patch yet",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys.json"
    }
   ],
   "json_url": "https://patchgap.ai/products/fearless-wallet-extension.json"
  },
  {
   "slug": "claude-code",
   "product": "Claude Code",
   "minimum_safe_version": "2.1.179",
   "newest_fix": null,
   "summary": "You're covered against everything listed here if you're on Claude Code 2.1.179 or newer.",
   "check_menu": "Open Terminal and type the command below.",
   "check_command": "claude --version",
   "shell": "Terminal",
   "read_only": true,
   "official_update": "https://www.anthropic.com/claude-code",
   "open_urgent": [],
   "json_url": "https://patchgap.ai/products/claude-code.json"
  },
  {
   "slug": "opencode",
   "product": "OpenCode",
   "minimum_safe_version": "1.18.33",
   "newest_fix": null,
   "summary": "You're covered against everything listed here if you're on OpenCode 1.18.33 or newer.",
   "check_menu": "Open Terminal and type the command below.",
   "check_command": "opencode --version",
   "shell": "Terminal",
   "read_only": true,
   "official_update": "https://github.com/anomalyco/opencode/releases",
   "open_urgent": [],
   "json_url": "https://patchgap.ai/products/opencode.json"
  },
  {
   "slug": "time4popcorn",
   "product": "Popcorn Time (Time4Popcorn)",
   "minimum_safe_version": null,
   "newest_fix": null,
   "summary": "No version of Popcorn Time is safe from everything listed here yet. Follow the steps on each problem's page.",
   "check_menu": "Open Finder > Applications and look for Popcorn Time or Time4Popcorn.",
   "check_command": "ls /Applications | grep -i popcorn",
   "shell": "Terminal",
   "read_only": true,
   "official_update": null,
   "open_urgent": [
    {
     "id": "popcorn-time-time4popcorn-dead-updater",
     "title": "Popcorn Time (Time4Popcorn): the app's updater is open to takeover. There is no fix.…",
     "status": "No patch yet",
     "being_attacked": false,
     "json_url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater.json"
    }
   ],
   "json_url": "https://patchgap.ai/products/time4popcorn.json"
  },
  {
   "slug": "adobe-reader",
   "product": "Adobe Acrobat Reader",
   "minimum_safe_version": "26.001.21411",
   "newest_fix": null,
   "summary": "You're covered against everything listed here if you're on Adobe Reader 26.001.21411 or newer.",
   "check_menu": "Open Acrobat Reader > Acrobat Reader menu > About Adobe Acrobat Reader.",
   "check_command": "mdls -name kMDItemVersion \"/Applications/Adobe Acrobat Reader.app\"",
   "shell": "Terminal",
   "read_only": true,
   "official_update": "https://get.adobe.com/reader/",
   "open_urgent": [
    {
     "id": "adobe-reader-attacked-bug-apr-2026",
     "title": "Adobe Acrobat Reader: a bad PDF could take over your computer, and it was used in real…",
     "status": "Patched: update now",
     "being_attacked": true,
     "json_url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026.json"
    }
   ],
   "json_url": "https://patchgap.ai/products/adobe-reader.json"
  }
 ]
}