Patch Tuesday, April 2026 Edition
2026-04-19T13:23:31Z•04994e41b63e9676bf078a42a085f033cfda094c34174c52626b79f726f9b3bf
adobe-readeraisuruauthentication-tokensbluehammercanisterwormcredential-theftdaniil-shchukindoxinggandcrabgoogle-chrome-zero-dayiot-botnetiran-targetingkimwolf','jackskid','mossad'microsoftpatch-tuesdayransomwareremote-code-executionrevilrouter-compromiserussia-linkedsharepoint-zero-daystate-backedsupply-chainwindows-defenderwiper
What happened
Collection of KrebsOnSecurity reports from Mar–Apr 2026 covering multiple high-impact incidents: Microsoft’s April Patch Tuesday fixes 167 vulnerabilities including a SharePoint zero-day and a publicly disclosed Windows Defender flaw dubbed “BlueHammer”; Google Chrome and Adobe Reader received emergency fixes for actively exploited zero-days and RCE bugs. A Russia-linked campaign abused legacy router vulnerabilities to mass-harvest Microsoft Office authentication tokens from >18,000 networks without malware. German authorities identified and doxed “UNKN” (Daniil Shchukin), a former operator of
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 04994e41b63e9676bf078a42a085f033cfda094c34174c52626b79f726f9b3bf
- Enrichment time
- 2026-04-19T13:23:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.