Patch Tuesday, April 2026 Edition
2026-04-20T07:23:28Z•42c67ea9e2773113ecb2df51cc5067f12caa5e5436eff5fe7cc3feb0ae6511c4
adobe-readeraisuruauthentication-tokensbluehammercanisterwormddosdoxinggandcrabgoogle-chromeiot-botnetiranjackskidkimwolfmicrosoftmossadoffice-tokenspatch-tuesdayrevilrouter-exploitsrussian-aptsharepointstryker-wiper','ai-assistants','insider-threat','phishing-as-a -windows-defenderwiperzero-day
What happened
A series of high-impact security events: Microsoft pushed April Patch Tuesday fixes for 167 vulnerabilities (including a SharePoint Server zero-day and a publicly disclosed Windows Defender issue dubbed “BlueHammer”), while Google Chrome and Adobe Reader received emergency fixes for active zero-days and RCE exploits. Separately, Russian military-linked actors abused known flaws in legacy routers to mass-harvest Microsoft Office authentication tokens from over 18,000 networks without deploying malware. Law enforcement in Germany identified Daniil Shchukin as the operator “UNKN” behind REvil/Gan
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 42c67ea9e2773113ecb2df51cc5067f12caa5e5436eff5fe7cc3feb0ae6511c4
- Enrichment time
- 2026-04-20T07:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.