Patch Gap today. Last checked 2026-11-07T17:33:08+00:00. Feed version 33bc46697a791b5a. Rules: read-only checks only; never install without the user's OK; official links only; say when unsure. 1. Fearless Wallet browser add-on stole users' wallet keys. There is no safe version. [BEING ATTACKED, NO PATCH YET] - Fearless Wallet (Windows/Mac/Linux): safe = No safe version exists.. Check: In Chrome, open chrome://extensions and look for Fearless Wallet. Click Details to see the… Do: Fearless Wallet add-on: move your coins to a new wallet now Official: https://forum.polkadot.network/t/security-notice-fearless-wallet-browser-extension-leaked-private-keys/19058 Detail: https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys.json 2. Popcorn Time (Time4Popcorn): the app's updater is open to takeover. There is no fix. Remove it. [NO PATCH YET] - Popcorn Time (Windows/Mac): safe = No fixed version exists.. Check: Start > Settings > Apps > Installed apps. Search for "Popcorn". Do: Remove Popcorn Time (Time4Popcorn). There is no fix Official: https://support.microsoft.com/windows/uninstall-or-remove-apps-and-programs-in-windows-4b55f974-2cc6-2d2b-d092-5905080eaf98 Detail: https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater.json 3. Electrum Bitcoin wallet: bad servers can trick you into paying a thief. Update to 4.8.3. [BEING ATTACKED, PATCHED: UPDATE NOW] - Electrum (Windows/Mac/Linux): safe = 4.8.3. Check: Open Electrum. Click Help > About Electrum. Do: Update Electrum to 4.8.3 Official: https://electrum.org/#download Detail: https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft.json 4. iPhone: criminals are using bad ads and old website tags to attack iPhones that are not updated [BEING ATTACKED, PATCHED: UPDATE NOW, unconfirmed] - iPhone (iPhone / iPad): safe = Install the newest iOS Apple offers for your phone. On Oct 26, 2026 these were iOS 27.2, 26.7.2 and 18.7.11 (older iPhones).. Check: On your iPhone: Settings > General > About to see your version. Settings > General > Software… Do: Update your iPhone or iPad to the newest iOS Official: https://support.apple.com/en-us/100100 Detail: https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware.json 5. Plex Media Server: hackers are chaining bugs to break in. Update to 1.43.3 or newer. [BEING ATTACKED, PATCHED: UPDATE NOW] - Plex (Windows/Mac/Linux): safe = 1.43.3. Check: Open Plex Media Server's app or tray icon and look for its version (About or Settings). You can… Do: Update Plex Media Server to 1.43.3 or newer Official: https://www.plex.tv/media-server-downloads/ Detail: https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks.json 6. Windows: a bug that lets a bad file skip Windows' safety warnings is being used by hackers [BEING ATTACKED, PATCHED: UPDATE NOW] - Windows (Windows): safe = Fixed by the October 13, 2026 Windows security update (or any newer update). Microsoft's Update Guide lists the exact update for each Windows version.. Check: Start > Settings > Windows Update. Then click Update history to see recent updates. Do: Run Windows Update (October 2026 update or newer) Official: https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a Detail: https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026.json 7. Mac and iPhone: a bad file could take over your device, and Apple says it was used in real attacks [BEING ATTACKED, PATCHED: UPDATE NOW] - Mac (Mac): safe = 26.7.1 (Tahoe) / 15.8.1 (Sequoia). Check: Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update. - iPhone (iPhone / iPad): safe = 26.7.1 / 18.7.11. Check: On your iPhone: Settings > General > About to see your version. Settings > General > Software… Do: Update your Mac (Tahoe 26.7.1 / Sequoia 15.8.1 or newer) and your iPhone or iPad (iOS 26.7.1 / 18.7.11 or newer) Official: https://support.apple.com/en-us/108382 Detail: https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026.json 8. Windows: bugs fixed in the September 2026 update were used in real attacks [BEING ATTACKED, PATCHED: UPDATE NOW] - Windows (Windows): safe = Fixed by the September 2026 Windows security update (2026-09-08) or any newer monthly update. Microsoft's page lists the exact update for each Windows version.. Check: Start > Settings > Windows Update. Then click Update history to see recent updates. Do: Run Windows Update (September 2026 update or newer) Official: https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a Detail: https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026.json 9. Chrome and Edge (Sep 2026, second fix): a bug in the part that runs website code (V8) was used in… [BEING ATTACKED, PATCHED: UPDATE NOW] - Chrome (Windows/Mac/Linux): safe = 153.0.8010.36. Check: Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates… - Edge (Windows/Mac): safe = 152.0.4191.66. Check: Click the three dots at the top right > Help and feedback > About Microsoft Edge. Do: Update Chrome to 153.0.8010.36 or newer and restart Edge Official: https://support.google.com/chrome/answer/95414 Detail: https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b.json 10. Chrome and Edge (Sep 2026, first fix): a bug in the part that runs website code (V8) was used in… [BEING ATTACKED, PATCHED: UPDATE NOW] - Chrome (Windows/Mac/Linux): safe = 152.0.7977.82. Check: Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates… - Edge (Windows/Mac): safe = 152.0.4191.62. Check: Click the three dots at the top right > Help and feedback > About Microsoft Edge. Do: Update Chrome to 152.0.7977.82 or newer and restart Edge Official: https://support.google.com/chrome/answer/95414 Detail: https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a.json 11. Windows: a bug fixed in the August 2026 update was used in real attacks [BEING ATTACKED, PATCHED: UPDATE NOW] - Windows (Windows): safe = Fixed by the August 2026 Windows security update (2026-08-11) or any newer monthly update. Microsoft's page lists the exact update for each Windows version.. Check: Start > Settings > Windows Update. Then click Update history to see recent updates. Do: Run Windows Update (August 2026 update or newer) Official: https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a Detail: https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026.json 12. Windows: a hidden start-up virus (BlackX) works even on updated PCs, unless one extra step is done [BEING ATTACKED, PARTLY PATCHED, unconfirmed] - Windows (Windows): safe = Microsoft's protection is in updates from July 9, 2024 and later, but it is NOT turned on by default. You must turn it on by following Microsoft's guide.. Check: Start > Settings > Windows Update. Then click Update history to see recent updates. Do: Windows: install updates, then check the extra Secure Boot step Official: https://support.microsoft.com/en-us/servicing/os/windows/2023/03/how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023 Detail: https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit.json 13. Fake website certificates: browsers and computers are blocking a certificate company's weak keys [PARTLY PATCHED] - Firefox (Windows/Mac/Linux): safe = 158.0.1 (ESR: 153.5.1 or 115.43.1). Check: Click the three lines at the top right > Help > About Firefox. Firefox checks for updates there. - Chrome (Windows/Mac/Linux): safe = Chrome blocked the keys the same day with no update. It removes the whole root certificate in a release that began rolling out Oct 27, 2026.. Check: Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates… - Edge (Windows/Mac): safe = Microsoft Edge blocks the keys automatically. Microsoft planned to remove the affected roots from Edge's trust list on Oct 27, 2026.. Check: Click the three dots at the top right > Help and feedback > About Microsoft Edge. Do: Update your browsers, Windows, Mac and Tailscale Official: https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/ Detail: https://patchgap.ai/incidents/emudhra-fake-website-certificates.json 14. NETGEAR routers and extenders: update your router's firmware (some older models will not get a fix) [PARTLY PATCHED] - NETGEAR router (Home router): safe = V2.3.4.12. Check: Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware… - NETGEAR router (Home router): safe = V1.0.14.108 and V1.0.15.110. Check: Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware… - NETGEAR router (Home router): safe = v1.0.15.110. Check: Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware… Do: Update your NETGEAR router's firmware Official: https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory Detail: https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026.json 15. Google Chrome 157 fixes 213 security bugs (Nov 3). Restart Chrome to get it. [PATCHED: UPDATE NOW] - Chrome (Windows/Mac/Linux): safe = 157.0.8103.38. Check: Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates… Do: Update Chrome to 157.0.8103.38 or newer Official: https://support.google.com/chrome/answer/95414 Detail: https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes.json 16. Google Chrome update fixes 21 more security bugs (Oct 29). Restart Chrome to get it. [PATCHED: UPDATE NOW] - Chrome (Windows/Mac/Linux): safe = 156.0.8078.79. Check: Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates… Do: Update Chrome to 156.0.8078.79 or newer Official: https://support.google.com/chrome/answer/95414 Detail: https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes.json 17. Google Chrome update fixes 52 more security bugs (Oct 27). Restart Chrome to get it. [PATCHED: UPDATE NOW] - Chrome (Windows/Mac/Linux): safe = 156.0.8078.73. Check: Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates… Do: Update Chrome to 156.0.8078.73 or newer Official: https://support.google.com/chrome/answer/95414 Detail: https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes.json 18. Google Chrome 156 fixes 353 security bugs. Restart Chrome to get it. [PATCHED: UPDATE NOW] - Chrome (Windows/Mac/Linux): safe = 156.0.8078.47. Check: Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates… Do: Update Chrome to 156.0.8078.47 or newer Official: https://support.google.com/chrome/answer/95414 Detail: https://patchgap.ai/incidents/chrome-156-security-fixes.json 19. Signal Desktop: update so calls end when you hang up [PATCHED: UPDATE NOW, unconfirmed] - Signal (Windows/Mac/Linux): safe = 8.31.0. Check: Open Signal. Windows and Linux: Help > About Signal Desktop. Mac: Signal > About Signal Desktop. Do: Update Signal Desktop to 8.31.0 Official: https://signal.org/download/ Detail: https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug.json 20. OpenCode AI helper on Windows: a bad connected tool could run code when you sign in [PATCHED: UPDATE NOW, unconfirmed] - OpenCode (Windows): safe = 1.18.33. Check: Open PowerShell and type the command below. Do: Update OpenCode to 1.18.33 Official: https://github.com/anomalyco/opencode/releases/tag/v1.18.33 Detail: https://patchgap.ai/incidents/opencode-windows-sign-in-code-run.json 21. Firefox 159 fixes 167 security bugs, and 159.0.1 fixes one more [PATCHED: UPDATE NOW] - Firefox (Windows/Mac/Linux): safe = 159.0.1 (ESR: 153.6 or 115.44). Check: Click the three lines at the top right > Help > About Firefox. Firefox checks for updates there. Do: Update Firefox to 159.0.1 (or ESR 153.6 / 115.44) Official: https://www.mozilla.org/firefox/new/ Detail: https://patchgap.ai/incidents/firefox-159-security-fixes.json 22. TeamViewer: update to version 15.83. A bad remote session could run code on your computer. [PATCHED: UPDATE NOW] - TeamViewer (Windows/Mac/Linux): safe = 15.83. Check: Open TeamViewer. Click Help > About TeamViewer (or the gear icon > About). Do: Update TeamViewer to 15.83 Official: https://www.teamviewer.com/download/ Detail: https://patchgap.ai/incidents/teamviewer-15-83-security-update.json