I don't understand the categorization for incidents. This signal vulnerability[1] is listed as "Live" and "ongoing" but was patched over a month ago (just announced today). If an incident with no known exploits is "ongoing" 1.5 months after the patch is released, when would it be over?
[1] https://pwn.watch/i/signal-ringrtc-cve-2026-113380