SoCyber

23/10/2026

What happens when AI agents start making payments on our behalf? And who is responsible when something goes wrong?

Krasimir Kotsev explored these questions yesterday at the Bucharest Cybersecurity Conference 2026 in his session “Who Authorised the Bot?”

As AI agents move from assisting people to deciding and paying on their own, a new set of security questions follows:
🤖 Identity: who is behind the agent, and what is it allowed to do?
🎭 Manipulation: what if malicious content steers its decisions?
💱 Financial control: how do we keep it within set spending limits?
🤝 Accountability: who answers when a transaction goes wrong?

The key takeaway: AI can make the decision, but security controls must decide what it is allowed to execute.

A sincere thank you to the Romanian National Cyber Security Directorate for the invitation and for bringing together such a strong community of policymakers, industry leaders and practitioners in Bucharest.

Thank you as well to everyone who joined the session and kept the conversation going afterwards.

See you at BCC next year!

22/10/2026

PHP2Shell (CVE-2026-109618, CVE-2026-109619) landed this week: two unauthenticated RCE bugs in the PHP engine itself, not in a framework or plugin. If a server runs PHP, it’s in scope.

So the question every team is asking right now: are we exposed, and where?
You can ask Kikimora exactly that. Give it your domain, and in one prompt the agent:
✅ checks what the internet sees on your domain and its hosts (Shodan, built in)
✅ flags anything running PHP below 8.5.12, 8.4.27, 8.3.36 or 8.2.35, plus branches with no upstream fix at all (8.1 and older)
✅ launches a Qualys WAS scan against your web app to test for PHP2Shell directly, so you’re not relying on version banners alone (Qualys WAS is built in, no license to buy)
✅ ranks what to patch first by real exposure, and drafts the upgrade steps for you to review and run

Want the inside view too? Deploy the built-in Network Scanner and ask the same question about your internal subnets.

The prompt is in the first comment. Swap in your domain, paste it, read the answer.

No Kikimora account yet? The free tier covers you, no credit card, and Qualys WAS come built in.
Start Free: https://kikimora.io

21/10/2026

📸 A few more highlights from the great evening in Bucharest!

A big thank you once again to our Romanian partners and everyone who joined us.

We’re glad we got to share this evening with you!

21/10/2026

👏 What an evening in Bucharest!

Some of the most interesting conversations start with questions that don’t have easy answers, and we had plenty of those at last night’s AI, Cyber & Compliance in the Agentic Era!

A huge thank you to Chris Kubecka, Toma Cîmpeanu, and Cristian Ganea for sharing your experience, insights, and honest perspectives and of course Matei Stefan for the great moderation. It was a great honor for Krasimir Kotsev and Martin Malinov to be part of such an esteemed line-up.

We’re also grateful to AIC Bucharest, ANSSI, and Impact Hub Bucharest for the invitation and warm welcome.

Until next time!

19/10/2026

Bags packed. Next stop: Bucharest! 🇷🇴🚀

The SoCyber & .io team is on the road again and we have a busy week ahead of us in Romania!

Tomorrow, we’re kicking things off at Bucharest Cybersecurity Conference 2026, followed by an evening of conversations on AI, Cyber & Compliance in the Agentic Era, together with our Romanian partners and the local cybersecurity community.

The schedule is full, team is ready, but there’s always time for a good cybersecurity conversation.

If you’re in Bucharest, let’s connect! 👋

15/10/2026

Next Thursday, 22 October, Krasimir Kotsev will speak at Bucharest Cybersecurity Conference 2026 hosted by The Romanian National Cyber Security Directorate addressing a question that is becoming increasingly important as businesses integrate AI agents into their operations:

How can we secure payment infrastructure for agentic AI?

Krasimir will discuss the security challenges that come with using agentic AI and how enterprises can benefit from automation without losing visibility or control.

📅 Thursday, 22 October 2026, 11:00–11:15
📍 HALO, Bucharest
🎤 In English | In person

We are looking forward to seeing you next week in Bucharest!
🔗 Full event agenda: https://bcc.dnsc.ro/agenda/

08/10/2026

Another excellent edition of the DIGI PAY conference today!

As cybersecurity professionals, we are pleased to see security becoming a foundational pillar of agentic infrastructure. Special thanks to Mastercard for highlighting the complexities of securing day-to-day payment operations and the guardrails needed to safeguard them.

Our colleague Veselina Mileva is at the event today and would be happy to connect and discuss your cybersecurity goals.

A huge shoutout to the DIGI PAY team for their ongoing work to grow and strengthen Bulgaria’s fintech ecosystem!

06/10/2026

Is pen testing still important when you build with AI?

More than ever. AI adds new ways in. An attacker can plant instructions in content your model consumes, steer it toward untrusted sources, and slowly corrupt the data it relies on. Many of these weaknesses aren't visible until someone actively looks for them.

The most reliable approach combines:
✔ Threat modeling, to map where your AI system is exposed
✔ Pen testing, to confirm which of those gaps attackers could really use

Every new feature or integration changes your attack surface, so this isn't a one-off check. It's part of building AI responsibly.

At SoCyber, we specialize in pe*******on testing, secure code review, and LLM security testing.

🔗 Learn more about our services: https://so-cyber.com/
Watch the full episode of the podcast 👇Link in comments 👇

24/07/2026

Днес Krasimir Kotsev, CEO на SoCyber, гостува в предаването „Бизнес старт“ по Bloomberg TV Bulgaria, където направи подробен анализ на скорошната атака срещу имотния регистър в Румъния и аналогиите със ситуацията у нас.

🔐 Ключови акценти от разговора:

➜ Базова хигиена и човешки фактор: Атаката започва от извлечени идентификационни данни (потребителско име и парола) и експлоатиране на стара уязвимост. Внедряването на многофакторна автентикация (MFA), мониторинг на мрежата и редовно пачване остават първата и най-важна линия на защита.

➜ Инвестиции според стойността на данните: Стопроцентова сигурност не съществува, но ресурсът, който дадена организация влага в сигурност, трябва да съответства на стойността на данните, които управлява.

➜ AI в борбата с уязвимостите: Изкуственият интелект позволява автоматизирането на процеси, които преди отнемаха седмици, да се случват за часове. В SoCyber използваме този потенциал, за да осигурим бърза идентификация и реакция за нашите клиенти.

Красимир също споделя повече и за следващия етап от международното разрастване на SoCyber на ключови пазари в САЩ и Африка, както и новите възможности на нашата платформа за управление на уязвимости - Kikimora.io.

📺 Гледайте целия запис на интервюто в сайта на Bloomberg TV Bulgaria: https://www.bloombergtv.bg/a/16-biznes-start/162285-kiberatakata-sreshtu-rumanskiya-imoten-registar-napodobyava-tazi-sreshtu-nap-ot-2019-g

Благодарим на екипа на Bloomberg TV Bulgaria за поканата и фокуса върху важните проблеми в киберсигурността.

Красимир Коцев, основател и главен изпълнителен директор на SoCyber, „Бизнес старт“, 24.07.2026 г.

14/04/2026

⏰ Напомняме за хората с интерес в сигурността в здравеопазването.

Не пропускайте безплатния уебинар „Киберсигурност в здравеопазването: рискове, регулации и практични решения“, където експерти от Digital Health and Innovations Cluster Bulgaria, Българска Болнична Асоциация, Mnemonica, Vereign и SoCyber ще разгледат най-актуалните теми - от новия Закон за киберсигурност (NIS2) до реални сценарии за пробиви в болнична среда.

Мартин Малинов, от екипа ни, ще разкаже как лечебните заведения могат да постигнат NIS2 (МИС2) съответствие на практика и да се защитят ефективно от модерните киберзаплахи.

📅 Регистрирайте се сега и запазете мястото си - събитието ще включва и отворена сесия за въпроси, в която можете да откриете решения в контекста на вашата организация.

Регистрация: 1e71e306-3853-48f8-868b-04d0be428647@423b74b4-6e0c-4cf4-8c75-67c6d23c5ff0" rel="ugc" target="_blank">https://events.teams.microsoft.com/event/1e71e306-3853-48f8-868b-04d0be428647@423b74b4-6e0c-4cf4-8c75-67c6d23c5ff0

📆 16.04.26 /Четвъртък/
🕒 14:30 - 15:45