Om S.

Aug 3, 2026

Someone messaged me recently.

Polite.

Humble.

Just asked for 15 minutes.

CV review.

Career guidance.

Nothing more.

I've been that person.

Typing and retyping

before hitting send.

Hoping someone

with 5-10 years ahead of me

would just

look up.

They didn't.

Here's what I want to say

to every senior, every HR,#HR #Talent

every "open to connect" profile

in this industry —

That junior reaching out

isn't wasting your time.

They're trusting you

with their anxiety.

You don't need an hour.

You don't need a full CV audit.

You don't need to have all the answers.

Just 15 minutes.

That's it.

One conversation

can shift someone's entire direction.

I've seen it happen.

I've felt it happen.

The ones who made it?

Almost always had

someone

who picked up.

Be that someone. GODAMMMM!!

If you're a junior reading this —

keep going.

One ignored message

doesn't define your path.

The right people exist.

They will show up.

And if you're senior —

your DMs are full of futures.

Treat them that way.

#Mentorship #CareerAdvice #HR #CyberSecurity #JobSeekers

View post

Jul 26, 2026

Hot take:

AI didn't kill bug bounty hunting.

It just exposed

who was actually good at it.

------

Here's what nobody says out loud —

The lazy ones used AI.

Copy pasted the output.

Hit submit.

No verification.

No proof of concept.

Just confidence.

70% of those reports?

Invalid.

----

And the good ones?

They gave AI the boring stuff.

Recon.

Mapping.

Saved hours.

Then went deeper.

Into the places

no prompt can reach.

------

Because the real bugs

don't look like bugs.

They feel like something's off.

That quiet instinct.

That "this shouldn't work but let me try anyway."

You can't automate that.

You can't even explain that.

-----

AI is a fast intern.

Hardworking.

Confident.

Zero curiosity.

-------------------

And in security?

Curiosity

is

everything.

----------------

The biggest companies in the world?

Biggest AI budgets on the planet?

Still running bug bounty programs.

Still paying human brains.

Still can't buy the mindset.

---------

Your tools are replaceable.

The way you think

isn't.

========

Tell me something —

What's one thing you caught manually

that every scanner and AI tool

completely missed?

Drop it below.

Real ones only.

View post

Jul 20, 2026

Published.

Our paper “Physio at Home: Survey on AI Motion Tracking for Medical Recovery Exercises and Suggestions Based on Accuracy” is now part of ICMSLE 2024, published by Springer (Algorithms for Intelligent Systems series).

In this work, we explored how AI-based motion tracking frameworks like MediaPipe, AlphaPose, OpenPose, and YOLOv7 can be used to improve recovery-focused medical exercises — especially when professional supervision isn’t always available.

Key focus areas:

• Motion accuracy in rehabilitation exercises

• Real-time feedback systems

• Pose correction for injury recovery

• AI-assisted progress tracking for patients

Recovery exercises are often underestimated — but incorrect execution can cause more harm than good. This research looks at how computer vision can bridge that gap.

Grateful to my co-authors and mentors for the collaboration.

DOI: https://link.springer.com/chapter/10.1007/978-981-97-1488-9_45

View post

Jul 20, 2026

Most cybersecurity professionals spend their careers mastering tools—Nessus, Qualys, Burp, Nmap, and managing endless SIEM alerts.

But throughout the UAE and GCC markets, I’ve observed a consistent truth: Tools get you shortlisted, but critical thinking gets you hired.

I have seen environments buried under thousands of "critical" findings where leadership is left asking: "What actually impacts our business?"

Running a scan is the easy part. Prioritizing risk within a complex enterprise environment is where the real work begins. True security expertise is about answering the hard questions:

• What is truly exploitable within this specific architecture?

• What poses a direct compliance risk in regulated markets like the UAE?

• Where is the potential for genuine financial or reputational damage?

• How do we allocate limited manpower to fix what matters first?

Anyone can hand over a 40-page vulnerability PDF. Very few can walk into a boardroom and say: “This is the real risk. This is the priority. Here is the decision we need to make.”

That is the definitive line between a tool operator and a strategic security professional.

If you are building a career—especially aiming for enterprise roles in the UAE or at global firms—shift your focus toward:

✔ Attack paths, not just isolated CVEs

✔ Complex misconfigurations in cloud and hybrid infrastructure

✔ Exploitability within a specific business context

✔ Identifying compliance drivers and true business impact

At the end of the day, companies don't pay for scans. They pay for clarity, professional judgment, and accountability.

View post

Jul 20, 2026

Most people in cyber know ATT&CK.

But.......

D3FEND is the part we skip and honestly, I think that’s a mistake.

I spent a few nights going through it properly, and the interesting part is not the number of techniques. It’s the mindset shift.

ATT&CK tells you how attackers move.

D3FEND tells you how defenders should respond in a structured way.

What stood out to me:

->

-It’s a knowledge graph, not just a static list.

-It connects defensive techniques to the attacks they counter.

-It gives defenders a common language instead of vague “best practice” talk.

- It feels more useful when you are mapping detection, response, or OT/ICS hardening.

->

For VAPT, OT/ICS, and CVE research, that matters.

==============================

We spend so much time understanding the attack path that we sometimes forget to model the defense with the same discipline.

===================================

My take: ATT&CK gets more attention, but D3FEND deserves more real use.

?????????????????????????????????????????????????????????????????????

Question for the room — are you actually using D3FEND in your workflow, or is it still just another framework people mention in posts

?????????????????????????????????????????????????????????????????????

#CyberSecurity #MITREATTACK #D3FEND #InfoSec #BlueTeam #ThreatIntelligence #VAPT #OTSecurity

View post