Alexandre Cheron (@axcheron) header
Alexandre Cheron (@axcheron) profile picture

Alexandre Cheron

@axcheron

Hacker. Security Researcher. Bytes Addict. Became self-aware at 5:32 a.m. Almost Human. Shall we play a game?

 Montréal
axcheron.github.io
Joined February 2011
  • Tweets13.5K
  • Following944
  • Followers1.7K
241Media
Photo by Alexandre Cheron (@axcheron)Photo by Alexandre Cheron (@axcheron)Photo by Alexandre Cheron (@axcheron)Photo by Alexandre Cheron (@axcheron)Photo by Alexandre Cheron (@axcheron)Photo by Alexandre Cheron (@axcheron)Photo by Alexandre Cheron (@axcheron)Photo by Alexandre Cheron (@axcheron)Photo by Alexandre Cheron (@axcheron)
Critical Windows Netlogon RCE flaw now exploited in attacks #RCE #Windows (CVE-2026-41089) bleepingcomputer.com/news/mi…
Critical Windows Netlogon RCE flaw now exploited in attacks

Critical Windows Netlogon RCE flaw now exploited in attacks

The Centre for Cybersecurity Belgium (CCB), the country's national authority for cybersecurity, warned on Friday that threat actors are now exploiting a recently patched critical Windows Netlogon...

bleepingcomputer.com
1
363
New Microsoft Defender “RedSun” zero-day PoC grants SYSTEM privileges bleepingcomputer.com/news/mi…

New Microsoft Defender “RedSun” zero-day PoC grants SYSTEM privileges

A researcher known as "Nightmare Eclipse" has published a proof-of-concept exploit for a second Microsoft Defender zero-day, dubbed "RedSun," in the past two weeks, protesting how the company works...

bleepingcomputer.com
209
EDR killer tool uses signed kernel driver from forensic software #EDR bleepingcomputer.com/news/se…

EDR killer tool uses signed kernel driver from forensic software

Hackers are abusing a legitimate but long-revoked EnCase kernel driver in an EDR killer that can detect 59 security tools in attempts to deactivate them.

bleepingcomputer.com
146
Notepad++ update feature hijacked by Chinese state hackers for months bleepingcomputer.com/news/se…
Notepad++ update feature hijacked by Chinese state hackers for months

Notepad++ update feature hijacked by Chinese state hackers for months

Chinese state-sponsored threat actors were likely behind the hijacking of Notepad++ update traffic last year that lasted for almost half a year, the developer states in an official announcement today.

bleepingcomputer.com
163
Overrun with AI slop, cURL scraps bug bounties to ensure “intact mental health” #Curl arstechnica.com/security/202…
Overrun with AI slop, cURL scraps bug bounties to ensure "intact mental health"

Overrun with AI slop, cURL scraps bug bounties to ensure "intact mental health"

The onslaught includes LLMs finding bogus vulnerabilities and code that won't compile.

arstechnica.com
96
Cloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin Servers thehackernews.com/2026/01/cl… #Cloudflare
Cloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin Servers

Cloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin Servers

Cloudflare patched an ACME HTTP-01 validation flaw that disabled WAF protections and let unauthorized requests reach origin servers.

thehackernews.com
176
Trend Micro Apex Central RCE Flaw Scores 9.8 CVSS in On-Prem Windows Versions thehackernews.com/2026/01/tr…
Trend Micro Apex Central RCE Flaw Scores 9.8 CVSS in On-Prem Windows Versions

Trend Micro Apex Central RCE Flaw Scores 9.8 CVSS in On-Prem Windows Versions

Trend Micro patched a critical Apex Central on-prem Windows flaw (CVE-2025-69258) with CVSS 9.8 that allows remote code execution if access exists.

thehackernews.com
213
NordVPN denies breach claims, says attackers have "dummy data" bleepingcomputer.com/news/se… #NordVPN
NordVPN denies breach claims, says attackers have "dummy data"

NordVPN denies breach claims, says attackers have "dummy data"

NordVPN denied allegations that its internal Salesforce development servers were breached, saying that cybercriminals obtained "dummy data" from a trial account on a third-party automated testing...

bleepingcomputer.com
72
Massive Rainbow Six Siege breach gives players billions of credits bleepingcomputer.com/news/se…
Massive Rainbow Six Siege breach gives players billions of credits

Massive Rainbow Six Siege breach gives players billions of credits

Ubisoft's Rainbow Six Siege (R6) suffered a breach that allowed hackers to abuse internal systems to ban and unban players, manipulate in-game moderation feeds, and grant massive amounts of in-game...

bleepingcomputer.com
618
TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering evilsocket.net/2025/12/18/TP…
TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse...

TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse...

Hi friends and welcome to the last post for this year! Whenever someone asks me how to get started with reverse engineering, I always give the same advice: buy…

evilsocket.net
108
Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active Attacks thehackernews.com/2025/12/un… #Gogs #0day
Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active Attacks

Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active Attacks

Unpatched Gogs flaw CVE-2025-8110 enables file overwrite and code execution, driving over 700 confirmed compromises.

thehackernews.com
84
Hackers Actively Exploiting 7-Zip Symbolic Link–Based RCE Vulnerability (CVE-2025-11001) thehackernews.com/2025/11/ha…

NHS Warns of PoC Exploit for 7-Zip Symbolic Link–Based RCE Vulnerability

Active exploitation targets 7-Zip CVE-2025-11001; patch 25.00 fixes symbolic link RCE flaws.

thehackernews.com
123
Catching Credential Guard Off Guard specterops.io/blog/2025/10/2…
Catching Credential Guard Off Guard

Catching Credential Guard Off Guard

Uncovering the protection mechanisms provided by modern Windows security features and identifying new methods for credential dumping.

specterops.io
90
Bypass AMSI in 2025 #AMSI r-tec.net/r-tec-blog-bypass-…
r-tec Blog | Bypass AMSI in 2025

r-tec Blog | Bypass AMSI in 2025

This blog post will shed some light on what's behind AMSI (roughly, but hopefully easy to understand) and how you can still effectively bypass it - more than four years later.

r-tec.net
116
TARmageddon Flaw in Async-Tar Rust Library Could Enable Remote Code Execution thehackernews.com/2025/10/ta…
TARmageddon Flaw in Async-Tar Rust Library Could Enable Remote Code Execution

TARmageddon Flaw in Async-Tar Rust Library Could Enable Remote Code Execution

High-severity TARmageddon flaw (CVE-2025-62518) in Rust’s async-tar libraries enables RCE via header parsing bug.

thehackernews.com
90
Over 266,000 F5 BIG-IP instances exposed to remote attacks bleepingcomputer.com/news/se…
Over 266,000 F5 BIG-IP instances exposed to remote attacks

Over 266,000 F5 BIG-IP instances exposed to remote attacks

Internet security nonprofit Shadowserver Foundation has found more than 266,000 F5 BIG-IP instances exposed online after the security breach disclosed by cybersecurity company F5 this week.

bleepingcomputer.com
130
13-Year-Old Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely #Redis #RCE thehackernews.com/2025/10/13…
13-Year-Old Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely

13-Year-Old Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely

Redis fixes 13-year CVSS 10 flaw allowing Lua script-based remote code execution in all versions.

thehackernews.com
98
One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens #Microsoft #EntraID dirkjanm.io/obtaining-global…
1
334
ksmbd - Fuzzing Improvements and Vulnerability Discovery (2/3) #Fuzzing blog.doyensec.com/2025/09/02…
115
Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel #Linux #Kernel a13xp0p0v.github.io/2025/09/…

Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel

Some memory corruption bugs are much harder to exploit than others. They can involve race conditions, crash the system, and impose limitations that make a researcher's life difficult. Working with...

a13xp0p0v.github.io
190
Load more