Patch Tuesday, April 2026 Edition
2026-04-18T19:23:39Z•815b5e2362bf207240bca435fded341ad7af17328aca201dc8cc253d12937ae1
GRU-linkedGandCrabREviladobe-readeraisuruauthentication-tokensbluehammerdoxinggoogle-chromeiot-botnetsjackskidkimwolfmass-harvestmicrosoftmossad-botnetpatch-tuesdayransomwareremote-code-executionrouter-exploitrussian-state-actorssharepointtoken-theftwindows-defenderwiper-malware','canisterworm'??zero-day
What happened
A collection of April–March 2026 KrebsOnSecurity reports covering multiple high-impact incidents: Microsoft’s April Patch Tuesday fixed 167 vulnerabilities (including a SharePoint Server zero-day and the publicly disclosed “BlueHammer” Windows Defender weakness); Google Chrome and Adobe Reader received emergency zero-day/actively exploited fixes. Separately, Russian military-linked actors exploited known flaws in older routers to mass-harvest Microsoft Office authentication tokens from 18,000+ networks without deploying malware. Law enforcement in Germany identified “UNKN” (Daniil Shchukin) as
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 815b5e2362bf207240bca435fded341ad7af17328aca201dc8cc253d12937ae1
- Enrichment time
- 2026-04-18T19:23:39Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.