Patch Tuesday, April 2026 Edition
2026-04-15T07:23:30Z•3a079ad7937de234ecc7f291facdb1c9ff084f027f1a36a4422c4a038f42b8f3
Adobe ReaderAisuruBlueHammerCanisterWormDDoSGandCrabGoogle ChromeIoT botnetsIranKimwolfMicrosoftMicrosoft OfficePatch TuesdayREvilRussiaSharePointWindows Defendercloud servicesdoxingremote code executionrouter vulnerabilitiesstate-sponsoredtoken theftwiperzero-day
What happened
KrebsOnSecurity roundup of April–Mar 2026 security news: Microsoft’s April Patch Tuesday fixes 167 vulnerabilities (including a SharePoint Server zero-day and a publicly disclosed Windows Defender issue nicknamed “BlueHammer”); Google Chrome received its fourth zero-day of 2026; Adobe issued an emergency Reader update to fix an actively exploited RCE. Separately, Russian state-linked actors exploited known router flaws to mass-harvest Microsoft Office authentication tokens from >18,000 networks. German authorities identified and doxed Daniil Shchukin (“UNKN”), alleged head of REvil and GandCr
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 3a079ad7937de234ecc7f291facdb1c9ff084f027f1a36a4422c4a038f42b8f3
- Enrichment time
- 2026-04-15T07:23:30Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.