Patch Tuesday, April 2026 Edition
2026-04-17T13:23:30Z•b1f4b1b18d1193b4537535629e9bbb8b5c85c42c1a7b0816dfb6b8cfb082d9ae
adobe-readeraisurubluehammercanisterwormddosgandcrab','doxing'google-chromeiot-botnetiranjackskidkimwolfmicrosoftmicrosoft-officemossad-botnetnation-state-espionagepatch-tuesdayrevilrouter-exploitrussiasharepointsupply-chaintoken-theftwindows-defenderwiperzero-day
What happened
Collection of KrebsOnSecurity reports (Feb–Apr 2026) covering multiple high-impact cyber events: Microsoft’s April Patch Tuesday fixed 167 vulnerabilities including a SharePoint zero-day and a publicly disclosed Windows Defender flaw nicknamed “BlueHammer”; Google Chrome and Adobe Reader received emergency zero-day fixes. Russian state-linked actors exploited legacy router flaws to mass-harvest Microsoft Office authentication tokens from ~18,000 networks. German authorities disclosed the identity of “UNKN,” alleged leader of REvil/GandCrab. A worm called “CanisterWorm” targets Iran via poorly‑
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- b1f4b1b18d1193b4537535629e9bbb8b5c85c42c1a7b0816dfb6b8cfb082d9ae
- Enrichment time
- 2026-04-17T13:23:30Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.