Patch Tuesday, April 2026 Edition
2026-04-16T01:23:29Z•ecdacb8d2c4433ebcc5437a895e418d2fc5c2596e66685c91cec574358607a0f
Adobe ReaderBlueHammerCanisterWormGandCrabGoogle ChromeIoT-botnet','Aisuru','Kimwolf','JackSkid','Mossad'Iran-targetingMicrosoftMicrosoft Office tokensREvilRussiaSharePointStrykerUNKNWindows Defendercredential-theftdoxingexploitpatch-tuesdayransomwarerouter-vulnerabilitiesstate-sponsoredvulnerabilitywiperzero-day
What happened
KrebsOnSecurity round-up covering multiple high-impact incidents: Microsoft’s April 2026 Patch Tuesday fixes 167 vulnerabilities including a SharePoint Server zero-day and a publicly disclosed Windows Defender flaw (“BlueHammer”); Google Chrome and Adobe Reader received emergency fixes for actively exploited zero-days. Separate investigations describe Russian state-linked actors exploiting router flaws to harvest Microsoft Office auth tokens from >18,000 networks, German authorities doxing the alleged REvil/GandCrab leader (“UNKN”), and a wiper called CanisterWorm targeting systems configured
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- ecdacb8d2c4433ebcc5437a895e418d2fc5c2596e66685c91cec574358607a0f
- Enrichment time
- 2026-04-16T01:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.