SECURITYMay 26 · 05:19 UTCTHE HACKER NEWS[email protected] (The Hacker News)

KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike

A high-severity vulnerability in Digital Knowledge's KnowledgeDeliver LMS (CVE-2026-5426) was exploited as a zero-day to deploy the Godzilla web shell and Cobalt Strike Beacon. The flaw, involving hard-coded ASP.NET machine keys, has now been patched.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

Digital Knowledge KnowledgeDeliverorganizationGodzillatopicCobalt Strike BeacontopicCVE-2026-5426topicASP.NET machine keystopic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYApr 6 · 20:24 UTC
Fortinet Issues Emergency Patch for FortiClient Zero-Day
SECURITYMay 18 · 21:43 UTC
Microsoft Exchange Zero-Day Under Attack, No Patch Available
SECURITYApr 24 · 07:24 UTC
LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosure
SECURITYApr 13 · 20:52 UTC
Adobe Patches Actively Exploited Zero-Day That Lingered for Months
SECURITYMay 15 · 09:40 UTC
Microsoft warns of Exchange zero-day flaw exploited in attacks
SECURITYApr 13 · 15:37 UTC
Adobe rolls out emergency fix for Acrobat, Reader zero-day flaw