‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty
2026-04-24T19:23:32Z•ed6634b757e8b94202abbb94f843b138aed45689ab1b63073f8682611de60363
18,000 networksAdobe Reader RCEBlueHammerDaniil ShchukinGandCrabGoogle Chrome zero-dayMicrosoft Patch TuesdayOffice authentication tokensREvilRussiaSMS-phishingScattered SpiderSharePoint zero-dayTylerbUNKNWindows Defenderaggravated identity theftdoxingmass token harvestingmilitary intelligencepatchesrouter exploitationvulnerabilitieswire fraudzero-day
What happened
Multiple high-impact cyber incidents and vulnerabilities were reported in April 2026: a senior member of the Scattered Spider group ("Tylerb") pleaded guilty for role in large SMS-phishing intrusions and cryptocurrency thefts; Microsoft released patches for 167 flaws including a SharePoint Server zero-day and a publicly disclosed Windows Defender issue dubbed "BlueHammer"; Google Chrome and Adobe issued emergency fixes for actively exploited zero-days; and Russian military-linked actors exploited router flaws to harvest Microsoft Office authentication tokens from >18,000 networks. Other items:
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- ed6634b757e8b94202abbb94f843b138aed45689ab1b63073f8682611de60363
- Enrichment time
- 2026-04-24T19:23:32Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.