Hackers exploited a critical zero-day vulnerability in a server running the KnowledgeDeliver learning management system (LMS) to deploy the Godzilla web shell.
CVE-2026-5426, a hardcoded ASP.NET machineKey in KnowledgeDeliver, was exploited as a zero-day in ViewState deserialization ...
Jared Ecker is a researcher and fact-checker. He possesses over a decade of experience in the Nuclear and National Defense sectors resolving issues on platforms as varied as stealth bombers to UAVs.