Miglen

Last night we had a fantastic OWASP Sofia meetup at @ProgressSW speaking about SAMM, AI security reviews & POS hacking. We wrapped it up with a great after-hours celebration for @owasp 25th anniversary (with some delicious cake).

Cleaning is optional. @Ryanair

If you ever need @NASAArtemis PIN code is 3939

Just published github.com/CSFbg/awesome-… - A curated list of cybersecurity resources, organisations, companies, events, job boards, books, and communities in Bulgaria.

@Cyb3rMaddy Cybersecurity is just paying people to be professionally paranoid. There's no completely secure only not hacked yet. It's also a fancy word for "with how much risk can you sleep with at night"?

what even is cyber security ????

If you know what this is, you're probably over 40.

@madelinelawren Password managers Vibecoded GRC products OSS security tools behind a polished UI Threat intel resellers (same data, different dashboard) AI-automated scanning/testing/remediation Security Questionnaires Automation (cmon, rly?) CSPM (replaceable by prowler)

when you think snake oil in cyber / infosec what comes to mind first?

Last week at @BSidesBG I played the CTF by @secragon and it turned out to be the best challenge I've done in over a decade. Chaining AI, OSINT, calls, geo clues and more one flow. Was able to win and prove I still got it! Writeup: @miglen/ctf-writeup-catch-the-flag-bsides-sofia-2026-c93d7753b15e" target="_blank" rel="nofollow noopener">medium.com/@miglen/ctf-wr…

Oh my @pcpcats #TeamPCP just shouted a leak about @BMWGroup by Xpl0itrs. All of the PII data is out for chap. This is 🤯

@cplearns2h4ck You've meant: pwn2own❌ prompt2own ✅

pwn2own❌ ai2own✅

@toomuchoohlll @coinbase You are more than welcome, life's a game anyway.

@miglen @coinbase Hey @miglen when I decide to grow up I will beat you at your own game. You are a cool dude.

Honored to be nominated for CISO of the year at Cybersecurity Excellence Awards Proud to work in a field where we protect people and strengthen the digital trust every day! Grateful for the journey so far and excited to see what 2026 brings! 🚀 cybersecurity-excellence-awards.com/candidates/mig…

@toomuchoohlll @coinbase Awards are recognitions, not absolute rankings. There are many outstanding CISOs across the industry doing critical work every day. I’m proud of the nomination and even prouder of the team behind it. The mission is what matters, and this is also my first year officially as CISO.

@miglen Lovely but mate you are not the CISO of the year that title belongs to @coinbase CISO you are damn good at it but

Happy Holidays! Real men deploy during the holiday season when it’s quiet and no-one would notice a little downtime.

След дълга лятна почивка, дойде момента за следващото ни събитие на OWASP Sofia Chapter. Ще имаме много интересни сесии от топ лектори! Аз, @miglen и @martinstnv ще ви очакваме! За регистрация: meetu.ps/e/PyYl6/NRg8m/i

@wiz_io Thanks for the great challenge, really enjoyed it, here’s my writeup without the flags: @miglen/the-cloud-hunting-games-ctf-by-wiz-writeup-of-exfilcola-ed59790c3025" target="_blank" rel="nofollow noopener">medium.com/@miglen/the-cl…

🔍IT'S HERE: #ExfilCola, our cloud IR security CTF challenge!🥤 Your mission: - Investigate the cloud environment logs - Research the compromised machines - Secure the files and save the day ⏰ The Cloud Hunting Games are live >> cloudhuntinggames.com

@vivacom е временно паднал, при обновяване на софтуера на кулите.

@Xbow @PentesterLab @PortSwigger No, you're not the first automated pentesting tool. There have been a large number of tools prior to that, otherwise good luck!

XBOW is the world’s first fully automated web pentester. It previously scored an unprecedented 75% on renowned web pentesting benchmarks from @PentesterLab and @PortSwigger. So we decided to give it a harder challenge: competing against humans.

The current situation with the @CrowdStrike incident will likely make business leaders more cautious about integrating security products, fearing similar disruptions and harm. However, this also presents a healthy reset for the heavy agent-based security vendors.

@tswetozar Реално разплащателните им системи не са спирали, просто самите им сайтове са спрели за час-два.

@miglen DSK - работи и то бързо (да не повярваш)

Българските банки ДСК, ЦКБ, Пощенска, Прокредит, ПИБ и Агенция "Митници" са афектирани от масивна атака от тип дистрибутиран отказ от услуга (DDoS) потенциално свързана с хакерската групировка NoName057(16).