Patch Tuesday, April 2026 Edition
2026-04-21T13:23:42Z•728c1851fea4d8bbd146c9ca145b155f883fa794e99778baf244ca865f35b688
adobe-readerbluehammercanisterwormddosdoxinggandcrabgoogle-chromeiot-botnet-disruptionmfa-bypassmicrosoftnation-statepatch-tuesdayphishing-as-a-serviceransomwareremote-code-executionrevilrouter-compromiserussia-linkedsharepointstarkillerstrykertoken-theftwindows-defenderwiper-malwarezero-day
What happened
KrebsOnSecurity roundup: April Patch Tuesday addressed 167 Microsoft vulnerabilities including a SharePoint Server zero-day and a publicly disclosed Windows Defender flaw called “BlueHammer”; Google Chrome received its fourth zero-day fix of 2026 and Adobe Reader got an emergency RCE patch for an actively exploited flaw. Separately, Russia-linked operators exploited known flaws in older Internet routers to mass-harvest Microsoft Office authentication tokens from users on more than 18,000 networks without deploying malware. Authorities disrupted four major IoT botnets (Aisuru, Kimwolf, JackSkid
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 728c1851fea4d8bbd146c9ca145b155f883fa794e99778baf244ca865f35b688
- Enrichment time
- 2026-04-21T13:23:42Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.