Hackers exploited a critical zero-day vulnerability in a server running the KnowledgeDeliver learning management system (LMS) to deploy the Godzilla web shell.

MuddyWater targeted 9 organizations in 9 countries during Q1 2026, using DLL side-loading to steal data and evade detection.

CVE-2026-5426, a hardcoded ASP.NET machineKey in KnowledgeDeliver, was exploited as a zero-day in ViewState deserialization ...

CVE-2026-5426 enabled KnowledgeDeliver LMS attacks before February 24, 2026, leading to Cobalt Strike infections.

Discover the hidden gem of media players that power users have been quietly enjoying for years, and find out why it's time to ...

CBSE Class 12 Evaluation System Issues: Adhikari claimed that by combining these flaws, an attacker could potentially take over examiner accounts, view assigned answer scripts, modify marks, and ...

CBSE denies claims of its marking portal being compromised, addressing concerns raised by an ethical hacker about security vulnerabilities.

Comedian Nate Bargatze has had a rocket strapped to his back in recent years. That's why going home is important for "The ...

Malicious packages across npm, PyPI, and Crates.io show how poisoned developer workflows can become a route into enterprise systems.

The Central Board of Secondary Education (CBSE) has been hit by a fresh digital storm after a 19-year-old cybersecurity researcher, Nisarga Adhikary, claimed to have revealed critical vulnerabilities ...

A teen cybersecurity researcher's blog post alleging serious flaws in CBSE's On-Screen Marking portal has triggered concern ...