RespostasPublicado12 fontes
CVE-2026-5426: O Ataque Zero-Day que Transformou um LMS Japonês em Plataforma de Distribuição do Cobalt Strike
Mandiant descobriu que uma chave de máquina ASP.NET única e fixa no LMS KnowledgeDeliver permitia que atacantes não autenticados executassem código remotamente através de desserialização do ViewState. A cadeia de ataque explorou o CVE 2026 5426 para acesso inicial, usou o web shell Godzilla (BLUEBEAM) para criar per...
Prompt de IA
openai.comCreate a landscape editorial hero image for this Studio Global article: What was the CVE-2026-5426 zero-day vulnerability in the KnowledgeDeliver LMS, how was it exploited by threat actors to deploy Cobalt Strike. Article summary: **CVE-2026-5426** is a critical zero-day vulnerability in **Digital Knowledge KnowledgeDeliver**, a Japanese Learning Management System (LMS) built on ASP.NET. The root cause is a **hard-coded ASP.NET/IIS `machineKey` va. Topic tags: general, government, general web. Reference image context from search candidates: Reference image 1: visual subject "# KnowledgeDeliver LMS Zero-Day Exploited to Deploy BLUEBEAM Web Shell. A newly disclosed zero-day vulnerability in the KnowledgeDeliver Learning Management System (LMS) has been a" source context "KnowledgeDeliver LMS Zero-Day Exploited to Deploy BLUEBEAM ..." Reference image 2: visual subject "# New Knowledge Deliv