🇧🇬 #Hacker & Information Security Enthusiast. Problem Solver. Always Learning (Mostly The Hard Way). #InfoSec@hacknotcrime advocate @owasp chapter lead
@dashlane had a cyber incident yesterday. Luckily just a brute-force attempt that got mitigated.
It brings back the good old question of whether password managers are actually the bigger risk by keeping all your eggs in one basked?
Over the years we've seen plenty of password managers deal with some kind of an attack. It's kind of expected, they're a high value target. But my point is that inherently they're still many times better than keeping passwords in a notebook or a txt file.
You only have to look at stealer logs to see where the alternative ends up as those credentials always surface somewhere. If you're a more advanced privacy user, sure, layer it with your own mature offline setup, your own encryption and safe storage.
Years ago, PHProxy was abandoned. It was a classic, lightweight PHP web proxy, but it desperately needed a modern touch.
Check it out, grab the code, or drop a star if you dig it:
github.com/PHProxy/phproxy
Last night we had a fantastic OWASP Sofia meetup at @ProgressSW speaking about SAMM, AI security reviews & POS hacking. We wrapped it up with a great after-hours celebration for @owasp 25th anniversary (with some delicious cake).
Just published github.com/CSFbg/awesome-cyb… - A curated list of cybersecurity resources, organisations, companies, events, job boards, books, and communities in Bulgaria.
Last week at @BSidesBG I played the CTF by @secragon and it turned out to be the best challenge I've done in over a decade. Chaining AI, OSINT, calls, geo clues and more one flow. Was able to win and prove I still got it!
Writeup: medium.com/@miglen/ctf-write…
Honored to be nominated for CISO of the year at Cybersecurity Excellence Awards
Proud to work in a field where we protect people and strengthen the digital trust every day!
Grateful for the journey so far and excited to see what 2026 brings! 🚀
cybersecurity-excellence-awa…
След дълга лятна почивка, дойде момента за следващото ни събитие на OWASP Sofia Chapter.
Ще имаме много интересни сесии от топ лектори!
Аз, @miglen и @martinstnv ще ви очакваме!
За регистрация: meetu.ps/e/PyYl6/NRg8m/i
The current situation with the @CrowdStrike incident will likely make business leaders more cautious about integrating security products, fearing similar disruptions and harm. However, this also presents a healthy reset for the heavy agent-based security vendors.
Българските банки ДСК, ЦКБ, Пощенска, Прокредит, ПИБ и Агенция "Митници" са афектирани от масивна атака от тип дистрибутиран отказ от услуга (DDoS) потенциално свързана с хакерската групировка NoName057(16).
NoName hackers group claims to have targeted multiple websites in Bulgaria
- DSK Bank
- Post Bank
- ProCredit Bank Bulgaria
- Central Cooperative Bank
- First Investment Bank
- National Customs Agency
#Bulgaria#noname#cti#threatintel#cyberattack
NoName hackers group claims to have targeted multiple websites in Bulgaria
- DSK Bank
- Post Bank
- ProCredit Bank Bulgaria
- Central Cooperative Bank
- First Investment Bank
- National Customs Agency
#Bulgaria#noname#cti#threatintel#cyberattack
Happy to share that I’ve recently joined @clubciso and here are my takeaways from the last Security Maturity report by its members: clubciso.org/clubciso-securi…
69% of the recruitment is from diverse backgrounds to bring different perspectives into the business while improving culture (54%) and
fostering greater innovation (48%) is the next most common reason.