Patch Tuesday, April 2026 Edition
2026-04-15T13:23:34Z•85ea46748f9ea911d441c2388bb6c94b17476a26b8b0b362ead65b50c20d3bf5
adobe-readeraisuruaptbluehammercanisterworm','wiper','stryker','starkiller','phishing-as-a‑servcredential-harvestddosdoxinggandcrabgoogle-chromeiot-botnetjackskidkimwolfmicrosoftmicrosoft-office-tokensmossadpatch-tuesdayransomwareremote-code-executionrevilrouter-compromiserussian-military-intelligencesharepointwindows-defenderzero-day
What happened
KrebsOnSecurity summaries (Mar–Apr 2026) covering multiple high-impact incidents: Microsoft’s April Patch Tuesday fixed 167 vulnerabilities including a SharePoint Server zero-day and a publicly disclosed Windows Defender weakness dubbed “BlueHammer”; Google Chrome received its fourth zero-day fix of 2026; Adobe Reader had an emergency RCE fix. Separately, Russian military-intel–linked actors exploited known flaws in older consumer routers to mass-harvest Microsoft Office authentication tokens from over 18,000 networks without malware. German authorities publicly identified “UNKN” as Daniil Shч
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 85ea46748f9ea911d441c2388bb6c94b17476a26b8b0b362ead65b50c20d3bf5
- Enrichment time
- 2026-04-15T13:23:34Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.