Patch Tuesday, April 2026 Edition
2026-04-18T07:23:28Z•945d796691bd50a43900e5b4f516ac21530074b246716a0f79838bf46206e386
adobe-readeraisurubluehammercanisterwormddosdoxinggandcrabgoogle-chromeiot-botnetjackskidkimwolfmicrosoftmossadoffice-token-theftpatch-tuesdayransomwareremote-code-executionrevilrouter-exploitrussian-actorssharepointstate-backedwindows-defenderwiper-attack','supply-chain','sryker','iran','starkiller','phishzero-day
What happened
April 2026 security roundup: Microsoft released patches for 167 vulnerabilities including a SharePoint Server zero-day and a publicly disclosed Windows Defender flaw dubbed “BlueHammer”; Google Chrome and Adobe Reader also pushed emergency fixes for actively exploited zero-days and RCE flaws. Separately, Russia-linked actors exploited flaws in older consumer/business routers to mass-harvest Microsoft Office authentication tokens from more than 18,000 networks without malware. Law enforcement disrupted four large IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad), Germany unmasked the alleged REv
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 945d796691bd50a43900e5b4f516ac21530074b246716a0f79838bf46206e386
- Enrichment time
- 2026-04-18T07:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.