Your Business Will Be Hacked – It's Not If, But When

Dr. Niklas Richter · 2026-07-02

### The Self-Taught Hacker Who Broke Into Microsoft Keanu Nys never studied IT. He taught himself to hack. Today, he's the Head of Offensive Security at Spotit, and companies pay him to break into their systems before real criminals do. In 2025, he stood on the main stage at DEF CON in Las Vegas, the world's biggest hacker conference, speaking to 3,000 people. His topic? A security flaw he discovered in Microsoft's own login page. This isn't some abstract threat. Keanu's story shows exactly how vulnerable your business might be right now. ### What Is a Penetration Test (Pentest)? A pentest is essentially a controlled hack. Keanu and his team try to breach your company's defenses using the same methods real attackers would. Here's what they look for: - Weak passwords and reused credentials - Unpatched software vulnerabilities - Employees who click on phishing emails - Physical security gaps (like unlocked server rooms) But here's the surprising part: technology is rarely the weakest link. ### The Human Factor: Why Your CEO Might Be Your Biggest Risk Keanu explains that IT staff sometimes disable security measures because the CEO urgently needs to open a document. That single act can expose the entire network. He once posed as a fake social security inspector to trick a CFO and their IT team simultaneously. Within minutes, he had full access to their systems. No advanced hacking tools needed, just a convincing story and a phone call. Another time, he nearly logged into former Belgian Prime Minister Alexander De Croo's Facebook account. He even received an official police citation after a legal hacking project. ### The Question Every Business Owner Must Answer Imagine this: You walk into the office Monday morning. Every single file is encrypted. The criminals demand 5 percent of your annual revenue. Do you pay or not? That's the question Keanu asks every business owner. And the answer isn't simple. Most companies don't have a plan for this scenario. ### How AI Is Changing the Game Artificial intelligence is making hacking both easier and more dangerous. Attackers can now automate phishing campaigns that are incredibly convincing. They can analyze your social media posts to craft personalized attacks that feel legitimate. But AI also helps defenders. Keanu's tool, GraphSpy, is used by thousands of ethical hackers worldwide. Unfortunately, real attackers sometimes misuse it too. ### Your First Step: Know Your Vulnerabilities Keanu's most important tip isn't about buying expensive software. It's about taking one simple step tomorrow: find out how vulnerable you actually are. Start with a basic security audit: - Check who has access to what - Run a phishing simulation on your team - Review your password policies - Test your physical security You don't need a million-dollar budget. You need awareness and action. ### What This Means for You Every email, every link, every meeting invitation could be a trap. But that doesn't mean you should live in fear. It means you should be prepared. Keanu's story is a wake-up call. The question isn't whether your business will be targeted. It's whether you'll be ready when it happens. Listen to the full conversation to hear how a fake social security inspector compromised an entire company, why your IT team might be your biggest weakness, and the one question that could save your business from ransomware. ### Key Takeaways - Hackers don't need advanced skills to breach most companies - Human error is the biggest security risk - AI is making attacks more sophisticated - Start with a simple security audit, not expensive tools - Have a plan for ransomware before it happens Your business's security starts with you. Take action today.