Patch Tuesday, April 2026 Edition
2026-04-19T19:23:28Z•4f2448928a449b6f284ae64090098679dbdd7752ef048a393a6d6a4e80169625
adobe-readeraisuruaptbluehammercanisterwormchrome-zero-dayddosgoogle-chromeiot-botnetiran-targetingjackskidkimwolfmicrosoftmicrosoft-office-tokensmossadpatch-tuesdayremote-code-executionrouter-exploitrussiasharepointstate-sponsoredtoken-theftwindows-defenderwiperzero-day
What happened
Multiple high-impact cyber events and updates from KrebsOnSecurity (Mar–Apr 2026): Microsoft’s April Patch Tuesday fixed 167 vulnerabilities including a SharePoint Server zero-day and a publicly disclosed Windows Defender flaw dubbed “BlueHammer”; Google Chrome and Adobe pushed urgent fixes (Chrome’s 4th zero-day of 2026; Adobe Reader RCE under active exploitation). Separately, Russia-linked actors exploited known vulnerabilities in legacy/consumer routers to mass-harvest Microsoft Office authentication tokens from users on more than 18,000 networks without deploying malware. U.S., Canadian, &
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 4f2448928a449b6f284ae64090098679dbdd7752ef048a393a6d6a4e80169625
- Enrichment time
- 2026-04-19T19:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.