Cybersecurity blog
Guides for companies: incident response, protecting websites and business email, NIS2 and GDPR requirements.
-
3 min readRansomware attack: what a company should do in the first hours
Practical steps after a ransomware attack: isolating affected systems, preserving evidence, checking backups and the mandatory notifications in Bulgaria.
-
3 min readPersonal data breach: when and how to notify the Bulgarian data protection authority
What a personal data breach is, when a company must notify the Commission for Personal Data Protection and the people affected, and what the notification contains.
-
2 min readHow to recognise fake emails from the NRA, Econt or Speedy
Signs of phishing emails sent in the name of the Bulgarian tax agency and courier companies, how to check the sender and what to do if the link has already been opened.
-
2 min readTechnical and organisational measures for personal data protection in practice
What the “appropriate technical and organisational measures” of Article 32 GDPR mean and which concrete measures every company should have.
-
2 min readHacked WordPress site: cleanup and protection
Signs of a compromised WordPress site, step-by-step cleanup and the settings that prevent another attack.
-
2 min readChecking for a hacked mailbox: how to tell whether business email is compromised
Signs of a compromised business mailbox, what to check in Microsoft 365 and Google Workspace, and the first steps to regain control.
-
4 min readWhich companies the Bulgarian Cybersecurity Act (NIS2) covers
Which organisations fall within the scope of the amended Bulgarian Cybersecurity Act, what measures it requires, how incidents are reported and what the penalties are.