Miglen

🇧🇬 #Hacker & Information Security Enthusiast. Problem Solver. Always Learning (Mostly The Hard Way). #InfoSec @hacknotcrime advocate @owasp chapter lead

[Miglen @miglen]

You only have to look at stealer logs to see where the alternative ends up as those credentials always surface somewhere. If you're a more advanced privacy user, sure, layer it with your own mature offline setup, your own encryption and safe storage.

[Miglen @miglen]

@dashlane had a cyber incident yesterday. Luckily just a brute-force attempt that got mitigated.

It brings back the good old question of whether password managers are actually the bigger risk by keeping all your eggs in one basked?

[Miglen @miglen]

Over the years we've seen plenty of password managers deal with some kind of an attack. It's kind of expected, they're a high value target. But my point is that inherently they're still many times better than keeping passwords in a notebook or a txt file.

[Miglen @miglen]

Years ago, PHProxy was abandoned. It was a classic, lightweight PHP web proxy, but it desperately needed a modern touch.

Check it out, grab the code, or drop a star if you dig it:
https://t.co/nSr1x1bYfw

[Miglen @miglen]

Last night we had a fantastic OWASP Sofia meetup at @ProgressSW speaking about SAMM, AI security reviews & POS hacking. We wrapped it up with a great after-hours celebration for @owasp 25th anniversary (with some delicious cake).

[Miglen @miglen]

Cleaning is optional. @Ryanair

[Miglen @miglen]

If you ever need @NASAArtemis PIN code is 3939

[Miglen @miglen]

Just published https://t.co/iyXh4pWC76 - A curated list of cybersecurity resources, organisations, companies, events, job boards, books, and communities in Bulgaria.

[Miglen @miglen]

@Cyb3rMaddy Cybersecurity is just paying people to be professionally paranoid. There's no completely secure only not hacked yet. It's also a fancy word for "with how much risk can you sleep with at night"?

[Miglen @miglen]

If you know what this is, you're probably over 40.

[Miglen @miglen]

@madelinelawren Password managers
Vibecoded GRC products
OSS security tools behind a polished UI
Threat intel resellers (same data, different dashboard)
AI-automated scanning/testing/remediation
Security Questionnaires Automation (cmon, rly?)
CSPM (replaceable by prowler)

[Miglen @miglen]

Last week at @BSidesBG I played the CTF by @secragon and it turned out to be the best challenge I've done in over a decade. Chaining AI, OSINT, calls, geo clues and more one flow. Was able to win and prove I still got it!

Writeup: https://t.co/FSuRpaFV1d

[Miglen @miglen]

Oh my @pcpcats #TeamPCP just shouted a leak about @BMWGroup by Xpl0itrs. All of the PII data is out for chap. This is 🤯

[Miglen @miglen]

@cplearns2h4ck You've meant: pwn2own❌ prompt2own ✅

[Miglen @miglen]

@toomuchoohlll @coinbase You are more than welcome, life's a game anyway.

[Miglen @miglen]

Honored to be nominated for CISO of the year at Cybersecurity Excellence Awards

Proud to work in a field where we protect people and strengthen the digital trust every day!

Grateful for the journey so far and excited to see what 2026 brings! 🚀

https://t.co/zhzyQZa3e8

[Miglen @miglen]

@toomuchoohlll @coinbase Awards are recognitions, not absolute rankings. There are many outstanding CISOs across the industry doing critical work every day.

I’m proud of the nomination and even prouder of the team behind it. The mission is what matters, and this is also my first year officially as CISO.

[Miglen @miglen]

Happy Holidays! Real men deploy during the holiday season when it’s quiet and no-one would notice a little downtime.

[ʞǝǝƃʎlloʇoʇ@ @totollygeek]

След дълга лятна почивка, дойде момента за следващото ни събитие на OWASP Sofia Chapter.

Ще имаме много интересни сесии от топ лектори!

Аз, @miglen и @martinstnv ще ви очакваме!

За регистрация: https://t.co/HTC3OIduUI

[Miglen @miglen]

@wiz_io Thanks for the great challenge, really enjoyed it, here’s my writeup without the flags: https://t.co/4dnRwn7lyX