Zero-days went from rare events to the 2026 baseline: the Chrome double zero-day, the APT28 re-exploited Windows Shell flaw, and Adobe's four-month window. The data, the CVEs, and a six-step defense playbook.
Microsoft’s April 2026 Patch Tuesday fixed 168 vulnerabilities — an exploited SharePoint zero-day (CVE-2026-32201), the BlueHammer Defender EoP, and a CVSS 9.8 IKE RCE. Complete breakdown and patching order inside.
April 2026 was one of the most volatile months in cybersecurity history: Microsoft’s 167-flaw Patch Tuesday, exploited SharePoint and IKE zero-days, ransomware at Rockstar and McGraw-Hill, and two CISA emergency directives — everything defenders need to know.