Patch Tuesday, April 2026 Edition
2026-04-19T01:23:31Z•fb7fea33a7978f228a20517e85fac4787413a90f5cc46e89e98bc69567c82905
actively-exploitedadobe-readeraisurubluehammerbotnet-takedowncanisterwormddosespionagegoogle-chromeiot-botnetjackskidkimwolfmicrosoftmicrosoft-officemossadpatch-tuesdayremote-code-executionrouter-exploitrussiasharepointstate-sponsoredtoken-theftwindows-defenderwiper-attack','iran'zero-day
What happened
KrebsOnSecurity aggregated multiple high-impact security stories: Microsoft’s April 2026 Patch Tuesday addresses 167 vulnerabilities (including a SharePoint Server zero-day and a publicly disclosed Windows Defender issue dubbed “BlueHammer”); Google Chrome fixed its fourth zero-day of 2026 and Adobe released an emergency Reader patch for an actively exploited RCE. Separately, state-linked Russian actors exploited known flaws in older internet routers to mass-harvest Microsoft Office authentication tokens from over 18,000 networks without deploying malware. Other notable items: a global law-enf
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- fb7fea33a7978f228a20517e85fac4787413a90f5cc46e89e98bc69567c82905
- Enrichment time
- 2026-04-19T01:23:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.