ABOUT
Ruben Enkaoua: Offensive Security Researcher
Founder of Kopnex.
Background
Ruben Enkaoua is an offensive security researcher and the founder of Kopnex, specialized in vulnerability research and security product evaluation.
As a Defense Evasion Researcher and later Security & Vulnerability Researcher, he discovered a generic bypass affecting CrowdStrike Falcon and Palo Alto Cortex XDR, identified vulnerabilities in Windows and Azure, and built MITRE ATT&CK TTP simulations and 1-day (n-day) assessments for a Breach & Attack Simulation (BAS) platform.
He regularly speaks at conferences on offensive security topics.
Recognition & publications
Vulnerabilities discovered, fixed with the affected vendors, then responsibly published.
Published CVEs
CVE-2025-50154
Zero-click NTLM leak, Microsoft security patch bypass.
CVE-2025-59214
NTLM leak, bypass of the CVE-2025-50154 patch.
CVE-2026-20847
Official Microsoft Security Response Center entry.
Press & institutions
The Hacker News
Roundup on privilege escalation research.
DC3 / DCISE
Cyber Threat Roundup, April 2025.
CERT-FR
Advisory CERTFR-2025-AVI-0687.
Cybersecurity News
Windows 0-click NTLM credential leakage.