Miglen

Since 2004 October traditionally is so-called Cybersecurity Awareness Month where us, the people working in the sector try to preach how important this is to improve the overall posture. I guess since this October we are all now well aware of it as we broke all of the records.

We're about to hear a lot for #php2shell so I've decided to pull a tl;dr page with specific info on how to fix, compensate, detect and test it here php2shell.io/

Do you remember the days when we were laughing at prompt engineering? Look at us now, doing exactly that all day every day.

At this stage, should @OpenAI be considered as a new category of APT?

Years ago, PHProxy was abandoned. It was a classic, lightweight PHP web proxy, but it desperately needed a modern touch. Check it out, grab the code, or drop a star if you dig it: github.com/PHProxy/phproxy

Last night we had a fantastic OWASP Sofia meetup at @ProgressSW speaking about SAMM, AI security reviews & POS hacking. We wrapped it up with a great after-hours celebration for @owasp 25th anniversary (with some delicious cake).

Cleaning is optional. @Ryanair

If you ever need @NASAArtemis PIN code is 3939

Just published github.com/CSFbg/awesome-cyb… - A curated list of cybersecurity resources, organisations, companies, events, job boards, books, and communities in Bulgaria.

If you know what this is, you're probably over 40.

Last week at @BSidesBG I played the CTF by @secragon and it turned out to be the best challenge I've done in over a decade. Chaining AI, OSINT, calls, geo clues and more one flow. Was able to win and prove I still got it! Writeup: medium.com/@miglen/ctf-write…

Oh my @pcpcats #TeamPCP just shouted a leak about @BMWGroup by Xpl0itrs. All of the PII data is out for chap. This is 🤯

Honored to be nominated for CISO of the year at Cybersecurity Excellence Awards Proud to work in a field where we protect people and strengthen the digital trust every day! Grateful for the journey so far and excited to see what 2026 brings! 🚀 cybersecurity-excellence-awa…

Happy Holidays! Real men deploy during the holiday season when it’s quiet and no-one would notice a little downtime.

The current situation with the @CrowdStrike incident will likely make business leaders more cautious about integrating security products, fearing similar disruptions and harm. However, this also presents a healthy reset for the heavy agent-based security vendors.

Българските банки ДСК, ЦКБ, Пощенска, Прокредит, ПИБ и Агенция "Митници" са афектирани от масивна атака от тип дистрибутиран отказ от услуга (DDoS) потенциално свързана с хакерската групировка NoName057(16).