Patch Tuesday, April 2026 Edition
2026-04-15T01:23:42Z•123bb122104a01381efbd03364e66129869595c97eb89a09a326fad19ccafa49
adobe-readeraisurubluehammercanisterwormddosgandcrabgoogle-chromeiot-botnetjackskidkimwolfmicrosoftmossadnation-statepatch-tuesdayransomwareremote-code-executionrevilrouter-exploitrussiasharepointstrykertoken-theftwindows-defenderwiperzero-day
What happened
The feed highlights multiple high-impact security developments in early 2026: Microsoft's April Patch Tuesday addresses 167 vulnerabilities — including a SharePoint Server zero-day and a publicly disclosed Windows Defender flaw nicknamed "BlueHammer" — while Google Chrome and Adobe Reader received emergency fixes for actively exploited zero-days. Separately, Russia-linked actors exploited flaws in older routers to mass-harvest Microsoft Office authentication tokens from over 18,000 networks, and German authorities identified and doxxed the alleged leader of historic ransomware gangs (REvil/Gh0
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 123bb122104a01381efbd03364e66129869595c97eb89a09a326fad19ccafa49
- Enrichment time
- 2026-04-15T01:23:42Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.