I was waiting for PCP for 2015 and it did not drop, so I got my wife a new Sublime Green Challenger instead. Now I will wait for the 2016 to unfold all the way before I buy in October or November.
I did not plan on getting the Uconnect myself, but the Challenger has it, and it was not vulnerable.
You can go to this site and plug in your VIN to see if your vehicle is vulnerable.
Uconnect® Software Update - Update your Uconnect® System
If there is a patch available for your vehicle, download it to a thumb drive and go stick it in the car, you will get instructions on how to update it.
There are no over the air updates like your android, as far as I know. You will have to do it yourself, have the dealership do it