Patch Tuesday, April 2026 Edition
2026-04-16T19:23:35Z•55dfdb9593c8f2c21d0e8e5e7a6556b0e63c7fb58d7915f4695c24f65a200b01
adobe readeraighost?aisuruaptbluehammercanisterwormddosgoogle chromeiot botnetiran targetingjackskidkimwolfmicrosoftmossadoffice authentication tokenspatch tuesdayransomwarerevil','gandcrab' ??router exploitationrussian state actorssharepoint zero-daystrykerwindows defenderwiperzero-day
What happened
The collection highlights multiple high-impact security events from Mar–Apr 2026: Microsoft’s April Patch Tuesday fixed 167 flaws including a SharePoint zero‑day and a publicly disclosed Windows Defender weakness (“BlueHammer”), while Google Chrome and Adobe pushed emergency zero‑day fixes. Russian military‑linked actors exploited known router vulnerabilities to mass‑harvest Microsoft Office authentication tokens from 18,000+ networks. Law enforcement disrupted four massive IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad) that had infected millions of devices and facilitated record‑setting DDoS
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 55dfdb9593c8f2c21d0e8e5e7a6556b0e63c7fb58d7915f4695c24f65a200b01
- Enrichment time
- 2026-04-16T19:23:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.