blog

Attackers’ Truth: Adapting the Storm-2949 Cloud Breach for Red Teaming

johannes@xplt.com (Johannes Schoenborn) — Tue, 07 Jul 2026 17:39:27 GMT

In February 2026, a critical manufacturing organization was compromised not by zero-day malware, but by their own cloud architecture.

Cybersecurity Breakfast Session together with the Austiran Business Council, Netherlands Business Council and the German Emirati Joint Council for Industry & Commerce

johannes@xplt.com (Johannes Schoenborn) — Mon, 06 Jul 2026 18:27:24 GMT

Speaking at the recent Austrian Business Council UAE cybersecurity event reinforced a critical market reality. The region is building the future, but foundational security is trailing behind the pace of innovation.

One-Off vs. Managed Pentesting: What Financial Institutions Must Know

johannes@xplt.com (Johannes Schoenborn) — Sat, 26 Jul 2025 08:27:33 GMT

Banks and large enterprises are not defined by a single website or mobile app. A modern financial institution might operate hundreds of interconnected services – from customer-facing portals to backend APIs, building management systems, and even IoT-based CCTV solutions. Each of these systems is a potential attack vector, and each has its own compliance and testing rhythm.

Pandas, Bears and Threat Actors: Why Red Teaming Goes Beyond CVEs

johannes@xplt.com (Johannes Schoenborn) — Wed, 23 Jul 2025 11:29:11 GMT

Why are there a panda and a bear in our current social media banners?
They are not random mascots – they represent real-world threat actors (e.g., China-based APT “Panda” groups and Russian “Bear” groups) that define modern cyber conflict. Each has its own patterns, tools, and attack paths. To defend effectively, you must understand who might attack you – and how they operate.

We have security solution X, do we even need a pentest?

johannes@xplt.com (Johannes Schoenborn) — Fri, 20 Jun 2025 18:08:01 GMT

"We already run Vectra and CrowdStrike — do we still need pentests?"

This caught me a bit off-guard.