Patch Tuesday, April 2026 Edition
2026-04-15T19:23:32Z•07f3bada5b16af222ac3dd22972441565ad41cb424245a43049e35253566bbf3
APTAdobe ReaderBlueHammerCanisterWormGandCrabGoogle ChromeIoT botnetIranIran-backed actorsMicrosoftPatch TuesdayREvilRussiaSharePointStrykerUNKNWindows Defenderauthentication tokenscredential theftdoxingpatch-managementrouter vulnerabilitiesvulnerabilitieswiperzero-day
What happened
Collection of KrebsOnSecurity reports covering April 2026 threat activity: Microsoft released fixes for 167 vulnerabilities (including a SharePoint Server zero-day and a publicly disclosed Windows Defender issue dubbed “BlueHammer”); Google Chrome and Adobe Reader received emergency fixes for actively exploited zero-days. A Russia-linked campaign abused known router flaws to harvest Microsoft Office authentication tokens from more than 18,000 networks. German authorities identified and doxxed “UNKN” (Daniil Shchukin), alleged leader of REvil/GandCrab. New wiper malware (“CanisterWorm”) targets
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 07f3bada5b16af222ac3dd22972441565ad41cb424245a43049e35253566bbf3
- Enrichment time
- 2026-04-15T19:23:32Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.