Topic

Patch Gap

The interval between a security fix becoming visible in public source code and reaching end users in shipped builds, and the exposure that interval creates for attackers to study the fix.

Current clusters

security2 publishers

Four espionage crews, most China-linked, ran the same Chrome exploit kit through a four-week patch gap

Proofpoint says at least four China-linked espionage groups fired the same BlueMoon code at different victims during the four weeks a Chromium fix took to reach stable Chrome, and two more groups probably did too.

Publishers:scworld.comtherecord.media

Reality

Evidence48
Adoption62
Hype gap+14
Incentives65
Confidence57