{"schema_version":"1.0","last_checked":"2026-11-07T17:33:08+00:00","feed_version":"33bc46697a791b5a","generated_at":"2026-11-07T18:30:10Z","about":"Patch Gap daily digest: items updated in the last 30 days plus open no-patch, partly fixed and being-attacked items from the last 90 days. Urgent first. Fetch json_url for detail. Free information, not professional security advice.","rules":["Use only read-only checks (the commands marked read_only, or the app's own About menu). Never run anything that changes the computer.","Never install, update, uninstall or change settings without the user's clear OK for that exact step.","Only give the user the official links in this feed (official_patch_links and sources). Never send them to a download from anywhere else.","If you cannot tell whether the user is affected, say so plainly instead of guessing.","Say 'unconfirmed' when an incident's confidence is 'unconfirmed'."],"windows_url":"https://patchgap.ai/windows.json","mac_url":"https://patchgap.ai/mac.json","total_matching":30,"shown":22,"urgent_count":12,"items":[{"id":"fearless-wallet-extension-leaks-private-keys","title":"Fearless Wallet browser add-on stole users' wallet keys. There is no safe version.","being_attacked":true,"status":"No patch yet","severity":"critical","unconfirmed":false,"updated_at":"2026-10-27","products":[{"product":"Fearless Wallet","platforms":["Windows","Mac","Linux"],"minimum_safe":"No safe version exists.","how_to_check":"In Chrome, open chrome://extensions and look for Fearless Wallet. Click Details to see the…"}],"more_products":0,"action":"Fearless Wallet add-on: move your coins to a new wallet now","official_link":"https://forum.polkadot.network/t/security-notice-fearless-wallet-browser-extension-leaked-private-keys/19058","json_url":"https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys.json"},{"id":"popcorn-time-time4popcorn-dead-updater","title":"Popcorn Time (Time4Popcorn): the app's updater is open to takeover. There is no fix. Remove it.","being_attacked":false,"status":"No patch yet","severity":"critical","unconfirmed":false,"updated_at":"2026-10-27","products":[{"product":"Popcorn Time","platforms":["Windows","Mac"],"minimum_safe":"No fixed version exists.","how_to_check":"Start > Settings > Apps > Installed apps. Search for \"Popcorn\"."}],"more_products":0,"action":"Remove Popcorn Time (Time4Popcorn). There is no fix","official_link":"https://support.microsoft.com/windows/uninstall-or-remove-apps-and-programs-in-windows-4b55f974-2cc6-2d2b-d092-5905080eaf98","json_url":"https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater.json"},{"id":"electrum-wallet-fake-server-fee-bump-theft","title":"Electrum Bitcoin wallet: bad servers can trick you into paying a thief. Update to 4.8.3.","being_attacked":true,"status":"Patched: update now","severity":"high","unconfirmed":false,"updated_at":"2026-10-27","products":[{"product":"Electrum","platforms":["Windows","Mac","Linux"],"minimum_safe":"4.8.3","how_to_check":"Open Electrum. Click Help > About Electrum."}],"more_products":0,"action":"Update Electrum to 4.8.3","official_link":"https://electrum.org/#download","json_url":"https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft.json"},{"id":"iphone-ads-and-hijacked-tags-spyware","title":"iPhone: criminals are using bad ads and old website tags to attack iPhones that are not updated","being_attacked":true,"status":"Patched: update now","severity":"high","unconfirmed":true,"updated_at":"2026-10-27","products":[{"product":"iPhone","platforms":["iPhone / iPad"],"minimum_safe":"Install the newest iOS Apple offers for your phone. On Oct 26, 2026 these were iOS 27.2, 26.7.2 and 18.7.11 (older iPhones).","how_to_check":"On your iPhone: Settings > General > About to see your version. Settings > General > Software…"}],"more_products":0,"action":"Update your iPhone or iPad to the newest iOS","official_link":"https://support.apple.com/en-us/100100","json_url":"https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware.json"},{"id":"plex-media-server-plex2shell-attacks","title":"Plex Media Server: hackers are chaining bugs to break in. Update to 1.43.3 or newer.","being_attacked":true,"status":"Patched: update now","severity":"high","unconfirmed":false,"updated_at":"2026-10-27","products":[{"product":"Plex","platforms":["Windows","Mac","Linux"],"minimum_safe":"1.43.3","how_to_check":"Open Plex Media Server's app or tray icon and look for its version (About or Settings). You can…"}],"more_products":0,"action":"Update Plex Media Server to 1.43.3 or newer","official_link":"https://www.plex.tv/media-server-downloads/","json_url":"https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks.json"},{"id":"windows-shell-zero-day-oct-2026","title":"Windows: a bug that lets a bad file skip Windows' safety warnings is being used by hackers","being_attacked":true,"status":"Patched: update now","severity":"high","unconfirmed":false,"updated_at":"2026-10-27","products":[{"product":"Windows","platforms":["Windows"],"minimum_safe":"Fixed by the October 13, 2026 Windows security update (or any newer update). Microsoft's Update Guide lists the exact update for each Windows version.","how_to_check":"Start > Settings > Windows Update. Then click Update history to see recent updates."}],"more_products":0,"action":"Run Windows Update (October 2026 update or newer)","official_link":"https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a","json_url":"https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026.json"},{"id":"macos-coregraphics-zero-day-sept-2026","title":"Mac and iPhone: a bad file could take over your device, and Apple says it was used in real attacks","being_attacked":true,"status":"Patched: update now","severity":"high","unconfirmed":false,"updated_at":"2026-10-28","products":[{"product":"Mac","platforms":["Mac"],"minimum_safe":"26.7.1 (Tahoe) / 15.8.1 (Sequoia)","how_to_check":"Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update."},{"product":"iPhone","platforms":["iPhone / iPad"],"minimum_safe":"26.7.1 / 18.7.11","how_to_check":"On your iPhone: Settings > General > About to see your version. Settings > General > Software…"}],"more_products":0,"action":"Update your Mac (Tahoe 26.7.1 / Sequoia 15.8.1 or newer) and your iPhone or iPad (iOS 26.7.1 / 18.7.11 or newer)","official_link":"https://support.apple.com/en-us/108382","json_url":"https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026.json"},{"id":"windows-attacked-bugs-sep-2026","title":"Windows: bugs fixed in the September 2026 update were used in real attacks","being_attacked":true,"status":"Patched: update now","severity":"high","unconfirmed":false,"updated_at":"2026-10-27","products":[{"product":"Windows","platforms":["Windows"],"minimum_safe":"Fixed by the September 2026 Windows security update (2026-09-08) or any newer monthly update. Microsoft's page lists the exact update for each Windows version.","how_to_check":"Start > Settings > Windows Update. Then click Update history to see recent updates."}],"more_products":0,"action":"Run Windows Update (September 2026 update or newer)","official_link":"https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a","json_url":"https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026.json"},{"id":"chrome-attacked-bug-sep-2026-b","title":"Chrome and Edge (Sep 2026, second fix): a bug in the part that runs website code (V8) was used in…","being_attacked":true,"status":"Patched: update now","severity":"high","unconfirmed":false,"updated_at":"2026-10-27","products":[{"product":"Chrome","platforms":["Windows","Mac","Linux"],"minimum_safe":"153.0.8010.36","how_to_check":"Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates…"},{"product":"Edge","platforms":["Windows","Mac"],"minimum_safe":"152.0.4191.66","how_to_check":"Click the three dots at the top right > Help and feedback > About Microsoft Edge."}],"more_products":0,"action":"Update Chrome to 153.0.8010.36 or newer and restart Edge","official_link":"https://support.google.com/chrome/answer/95414","json_url":"https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b.json"},{"id":"chrome-attacked-bug-sep-2026-a","title":"Chrome and Edge (Sep 2026, first fix): a bug in the part that runs website code (V8) was used in…","being_attacked":true,"status":"Patched: update now","severity":"high","unconfirmed":false,"updated_at":"2026-10-27","products":[{"product":"Chrome","platforms":["Windows","Mac","Linux"],"minimum_safe":"152.0.7977.82","how_to_check":"Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates…"},{"product":"Edge","platforms":["Windows","Mac"],"minimum_safe":"152.0.4191.62","how_to_check":"Click the three dots at the top right > Help and feedback > About Microsoft Edge."}],"more_products":0,"action":"Update Chrome to 152.0.7977.82 or newer and restart Edge","official_link":"https://support.google.com/chrome/answer/95414","json_url":"https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a.json"},{"id":"windows-attacked-bugs-aug-2026","title":"Windows: a bug fixed in the August 2026 update was used in real attacks","being_attacked":true,"status":"Patched: update now","severity":"high","unconfirmed":false,"updated_at":"2026-10-27","products":[{"product":"Windows","platforms":["Windows"],"minimum_safe":"Fixed by the August 2026 Windows security update (2026-08-11) or any newer monthly update. Microsoft's page lists the exact update for each Windows version.","how_to_check":"Start > Settings > Windows Update. Then click Update history to see recent updates."}],"more_products":0,"action":"Run Windows Update (August 2026 update or newer)","official_link":"https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a","json_url":"https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026.json"},{"id":"windows-secure-boot-blackx-bootkit","title":"Windows: a hidden start-up virus (BlackX) works even on updated PCs, unless one extra step is done","being_attacked":true,"status":"Partly patched","severity":"medium","unconfirmed":true,"updated_at":"2026-10-27","products":[{"product":"Windows","platforms":["Windows"],"minimum_safe":"Microsoft's protection is in updates from July 9, 2024 and later, but it is NOT turned on by default. You must turn it on by following Microsoft's guide.","how_to_check":"Start > Settings > Windows Update. Then click Update history to see recent updates."}],"more_products":0,"action":"Windows: install updates, then check the extra Secure Boot step","official_link":"https://support.microsoft.com/en-us/servicing/os/windows/2023/03/how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023","json_url":"https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit.json"},{"id":"emudhra-fake-website-certificates","title":"Fake website certificates: browsers and computers are blocking a certificate company's weak keys","being_attacked":false,"status":"Partly patched","severity":"high","unconfirmed":false,"updated_at":"2026-10-27","products":[{"product":"Firefox","platforms":["Windows","Mac","Linux"],"minimum_safe":"158.0.1 (ESR: 153.5.1 or 115.43.1)","how_to_check":"Click the three lines at the top right > Help > About Firefox. Firefox checks for updates there."},{"product":"Chrome","platforms":["Windows","Mac","Linux"],"minimum_safe":"Chrome blocked the keys the same day with no update. It removes the whole root certificate in a release that began rolling out Oct 27, 2026.","how_to_check":"Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates…"},{"product":"Edge","platforms":["Windows","Mac"],"minimum_safe":"Microsoft Edge blocks the keys automatically. Microsoft planned to remove the affected roots from Edge's trust list on Oct 27, 2026.","how_to_check":"Click the three dots at the top right > Help and feedback > About Microsoft Edge."}],"more_products":3,"action":"Update your browsers, Windows, Mac and Tailscale","official_link":"https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/","json_url":"https://patchgap.ai/incidents/emudhra-fake-website-certificates.json"},{"id":"netgear-router-and-extender-fixes-oct-2026","title":"NETGEAR routers and extenders: update your router's firmware (some older models will not get a fix)","being_attacked":false,"status":"Partly patched","severity":"medium","unconfirmed":false,"updated_at":"2026-10-27","products":[{"product":"NETGEAR router","platforms":["Home router"],"minimum_safe":"V2.3.4.12","how_to_check":"Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware…"},{"product":"NETGEAR router","platforms":["Home router"],"minimum_safe":"V1.0.14.108 and V1.0.15.110","how_to_check":"Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware…"},{"product":"NETGEAR router","platforms":["Home router"],"minimum_safe":"v1.0.15.110","how_to_check":"Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware…"}],"more_products":5,"action":"Update your NETGEAR router's firmware","official_link":"https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory","json_url":"https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026.json"},{"id":"chrome-157-nov-3-security-fixes","title":"Google Chrome 157 fixes 213 security bugs (Nov 3). Restart Chrome to get it.","being_attacked":false,"status":"Patched: update now","severity":"critical","unconfirmed":false,"updated_at":"2026-11-03","products":[{"product":"Chrome","platforms":["Windows","Mac","Linux"],"minimum_safe":"157.0.8103.38","how_to_check":"Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates…"}],"more_products":0,"action":"Update Chrome to 157.0.8103.38 or newer","official_link":"https://support.google.com/chrome/answer/95414","json_url":"https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes.json"},{"id":"chrome-156-oct-29-security-fixes","title":"Google Chrome update fixes 21 more security bugs (Oct 29). Restart Chrome to get it.","being_attacked":false,"status":"Patched: update now","severity":"critical","unconfirmed":false,"updated_at":"2026-10-29","products":[{"product":"Chrome","platforms":["Windows","Mac","Linux"],"minimum_safe":"156.0.8078.79","how_to_check":"Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates…"}],"more_products":0,"action":"Update Chrome to 156.0.8078.79 or newer","official_link":"https://support.google.com/chrome/answer/95414","json_url":"https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes.json"},{"id":"chrome-156-oct-27-security-fixes","title":"Google Chrome update fixes 52 more security bugs (Oct 27). Restart Chrome to get it.","being_attacked":false,"status":"Patched: update now","severity":"critical","unconfirmed":false,"updated_at":"2026-10-28","products":[{"product":"Chrome","platforms":["Windows","Mac","Linux"],"minimum_safe":"156.0.8078.73","how_to_check":"Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates…"}],"more_products":0,"action":"Update Chrome to 156.0.8078.73 or newer","official_link":"https://support.google.com/chrome/answer/95414","json_url":"https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes.json"},{"id":"chrome-156-security-fixes","title":"Google Chrome 156 fixes 353 security bugs. Restart Chrome to get it.","being_attacked":false,"status":"Patched: update now","severity":"critical","unconfirmed":false,"updated_at":"2026-10-27","products":[{"product":"Chrome","platforms":["Windows","Mac","Linux"],"minimum_safe":"156.0.8078.47","how_to_check":"Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates…"}],"more_products":0,"action":"Update Chrome to 156.0.8078.47 or newer","official_link":"https://support.google.com/chrome/answer/95414","json_url":"https://patchgap.ai/incidents/chrome-156-security-fixes.json"},{"id":"signal-desktop-call-hang-up-bug","title":"Signal Desktop: update so calls end when you hang up","being_attacked":false,"status":"Patched: update now","severity":"critical","unconfirmed":true,"updated_at":"2026-10-27","products":[{"product":"Signal","platforms":["Windows","Mac","Linux"],"minimum_safe":"8.31.0","how_to_check":"Open Signal. Windows and Linux: Help > About Signal Desktop. Mac: Signal > About Signal Desktop."}],"more_products":0,"action":"Update Signal Desktop to 8.31.0","official_link":"https://signal.org/download/","json_url":"https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug.json"},{"id":"opencode-windows-sign-in-code-run","title":"OpenCode AI helper on Windows: a bad connected tool could run code when you sign in","being_attacked":false,"status":"Patched: update now","severity":"critical","unconfirmed":true,"updated_at":"2026-10-27","products":[{"product":"OpenCode","platforms":["Windows"],"minimum_safe":"1.18.33","how_to_check":"Open PowerShell and type the command below."}],"more_products":0,"action":"Update OpenCode to 1.18.33","official_link":"https://github.com/anomalyco/opencode/releases/tag/v1.18.33","json_url":"https://patchgap.ai/incidents/opencode-windows-sign-in-code-run.json"},{"id":"firefox-159-security-fixes","title":"Firefox 159 fixes 167 security bugs, and 159.0.1 fixes one more","being_attacked":false,"status":"Patched: update now","severity":"high","unconfirmed":false,"updated_at":"2026-11-03","products":[{"product":"Firefox","platforms":["Windows","Mac","Linux"],"minimum_safe":"159.0.1 (ESR: 153.6 or 115.44)","how_to_check":"Click the three lines at the top right > Help > About Firefox. Firefox checks for updates there."}],"more_products":0,"action":"Update Firefox to 159.0.1 (or ESR 153.6 / 115.44)","official_link":"https://www.mozilla.org/firefox/new/","json_url":"https://patchgap.ai/incidents/firefox-159-security-fixes.json"},{"id":"teamviewer-15-83-security-update","title":"TeamViewer: update to version 15.83. A bad remote session could run code on your computer.","being_attacked":false,"status":"Patched: update now","severity":"high","unconfirmed":false,"updated_at":"2026-10-27","products":[{"product":"TeamViewer","platforms":["Windows","Mac","Linux"],"minimum_safe":"15.83","how_to_check":"Open TeamViewer. Click Help > About TeamViewer (or the gear icon > About)."}],"more_products":0,"action":"Update TeamViewer to 15.83","official_link":"https://www.teamviewer.com/download/","json_url":"https://patchgap.ai/incidents/teamviewer-15-83-security-update.json"}]}