A now-patched high-severity security flaw affecting Digital
Knowledge KnowledgeDeliver, a Learning Management System (LMS)
popular in Japan, was exploited as a zero-day to deliver the
Godzilla web shell and ultimately facilitate the deployment of
Cobalt Strike Beacon. The vulnerability, tracked as CVE-2026-5426
(CVSS score: 7.5), stems from the use of hard-coded ASP.NET machine
keys, leading to
Read more https://thehackernews.com/2026/05/knowledgedeliver-lms-flaw-exploited-to.html

