Patch Tuesday, April 2026 Edition
2026-04-20T19:23:35Z•1d9d6e4d605271d77c4f1327185a8c63a1c0c4af544fea7d62045fffb79fade3
adobe-readeraisurubluehammercanisterwormchrome-zero-dayddosgandcrabiot-botnetiran-backedjackskidkimwolfmicrosoft-office-tokensmicrosoft-patch-tuesdaymossad-botnetransomwareremote-code-executionrevilrouter-exploitrussian-military-intelsharepoint-zero-daystryker-incidentunknwindows-defenderwiperzero-day
What happened
KrebsOnSecurity aggregated April–March 2026 cyber news: Microsoft shipped fixes for 167 vulnerabilities (including a SharePoint Server zero-day and a publicly disclosed Windows Defender issue dubbed “BlueHammer”); Google Chrome and Adobe Reader received emergency zero-day/actively exploited RCE fixes. Separately, actors linked to Russian military intelligence exploited known router flaws to harvest Microsoft Office authentication tokens from over 18,000 networks without deploying malware. Law enforcement disrupted four massive IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad) that had infected >
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 1d9d6e4d605271d77c4f1327185a8c63a1c0c4af544fea7d62045fffb79fade3
- Enrichment time
- 2026-04-20T19:23:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.