Patch Tuesday, April 2026 Edition
2026-04-21T01:23:31Z•fe73682dee98161f242a08421829ac05624e707d4a534b72663165cc930cf54f
APTAdobe ReaderAisuruBlueHammerCanisterWorm","Iran-targeting"Daniil ShchukinGandCrabGoogle ChromeIoT botnetJackSkidKimwolfMicrosoftMicrosoft Office tokensMossadPatch TuesdayRCEREvilRussiaSharePointUNKNWindows Defenderransomwarerouter compromisewiperzero-day
What happened
April 2026 intelligence roundup: Microsoft released fixes for 167 vulnerabilities (including a SharePoint Server zero-day and a publicly disclosed Windows Defender issue dubbed "BlueHammer"); Google Chrome and Adobe Reader both patched actively exploited zero-days/RCEs. Russian state-linked actors exploited known flaws in legacy routers to mass-harvest Microsoft Office authentication tokens from over 18,000 networks. Law enforcement disrupted four massive IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad) that infected millions of devices. Separately, Germany identified "UNKN" (Daniil Shchukin) —
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- fe73682dee98161f242a08421829ac05624e707d4a534b72663165cc930cf54f
- Enrichment time
- 2026-04-21T01:23:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.