Patch Tuesday, April 2026 Edition
2026-04-17T01:23:31Z•c96947cda95e5c1ef8d5aaed4603cd581776ce92676397efb373084593221e24
adobe-readeraisuruauthentication-token-theftbluehammercanisterwormddosdoxinggandcrabgoogle-chromeiot-botnetsiran-linkedjackskidkimwolfmossad-botnetpatch-tuesdayransomwarerevilrouter-exploitsrussia-aptsharepointstarkiller-phishing-as-a-service','mfa-bypass','ai-security'],strykerwindows-defenderwiperzero-day
What happened
Recent reporting highlights multiple high-impact cyber events: Microsoft’s April 2026 Patch Tuesday addresses 167 vulnerabilities including a SharePoint Server zero-day and a publicly disclosed Windows Defender flaw dubbed “BlueHammer”; Google Chrome and Adobe Reader received emergency fixes for actively exploited zero-days. Separately, Russia-linked actors exploited known flaws in older consumer/edge routers to mass-harvest Microsoft Office authentication tokens from more than 18,000 networks without deploying malware. Law enforcement disrupted four large IoT botnets (Aisuru, Kimwolf, JackSk
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- c96947cda95e5c1ef8d5aaed4603cd581776ce92676397efb373084593221e24
- Enrichment time
- 2026-04-17T01:23:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.