Samarthya

Life can change any moment, and I am ready for it.

About Me

From 4,000 Findings to a Sprint Backlog: A Practical Vulnerability Triage Playbook

In the last post I argued that prioritization – not patching speed – is the discipline that keeps security teams afloat. That’s easy to say and hard to operationalize. “Fix what’s exploitable” is a slogan; it isn’t a workflow. This post is the workflow; it’s the triage flow I’d actually run, the decisions at each […]

CVE, CWE, and the Art of Not Fixing Everything: A CISM’s Guide to Prioritization in the Age of AI

Imagine….. Your scanner just flagged 4,000 vulnerabilities. Your team can realistically patch a few dozen this sprint. AI-assisted tooling is generating code and findings faster than any human can triage. Welcome to the maddening pace of modern security, where the question is no longer “what’s vulnerable?” but “what actually matters, and in what order?“ Answering […]

GIT – Revert?

Most of the blogs I write serve as a self reminder; things I have tried personally. In one of the recent encounters where a GUI tool wasn’t was possibility I was extra cautious while trying to roll back a production code that I had not committed to ensure no functionality gets broken. This blog serves […]

Know Thyself (Or At Least Try): Self-Awareness as the Foundation of Effective Leadership

There’s a certain irony in leadership development. You can master stakeholder matrices, project communication plans, and conflict resolution frameworks; and still be the reason your team is quietly updating their LinkedIn profiles. The missing ingredient, more often than not, is self-awareness. It’s not a soft skill. It’s the skill everything else is built on, before […]