Patch Tuesday, April 2026 Edition
2026-04-19T07:23:28Z•e108b2e096b14fc17634dd6d244a0a1aa44634288df3c0bab6826658f18d0990
Adobe ReaderAisuruBlueHammerCanisterWormDDoS attacks','Stryker','Iran-backed actors','AI assistants','StDaniil ShchukinGandCrabGoogle ChromeIoT botnetsJackSkidKimwolfMicrosoft Office tokensMicrosoft Patch TuesdayMossadREvilRussiaRussian military intelligenceSharePoint ServerUNKNWindows Defendercloud service abusecredential/token harvestingrouter vulnerabilitieswiper malwarezero-day
What happened
Collection of KrebsOnSecurity posts (Mar–Apr 2026) covering multiple active and emerging threats: Microsoft’s April Patch Tuesday fixed 167 vulnerabilities (including a SharePoint Server zero-day and a publicly disclosed Windows Defender issue dubbed “BlueHammer”); Google Chrome and Adobe Reader received emergency zero-day/RCE fixes. Separately, Russian military-linked actors exploited known router vulnerabilities to mass-harvest Microsoft Office authentication tokens from 18,000+ networks without deploying malware. German authorities identified “UNKN” (Daniil Shchukin) as the operator behind早
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- e108b2e096b14fc17634dd6d244a0a1aa44634288df3c0bab6826658f18d0990
- Enrichment time
- 2026-04-19T07:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.