IIT Kanpur recruits teen who exposed CBSE portal flaws

Nisarga Adhikary, known for responsibly flagging security flaws in CBSE’s online marking system, has taken up a role at IIT Kanpur’s C3iHub, advancing his journey into professional cybersecurity research and national threat intelligence work ecosystem.

Nisarga Adhikary, a young cybersecurity researcher who first drew attention for exposing security vulnerabilities in the Central Board of Secondary Education (CBSE) On-Screen Marking (OSM) portal, has now joined the C3iHub cybersecurity research centre at the Indian Institute of Technology Kanpur as an OSINT and Threat Intelligence Engineer.

The appointment marks a significant step in Adhikary’s transition from an independent ethical hacker to a professional working within one of India’s leading cybersecurity and cyber defence research ecosystems. It also reflects the growing institutional recognition of responsible vulnerability research and the role of young talent in strengthening digital systems.

Vulnerability discovery and responsible reporting

Adhikary had earlier identified multiple security weaknesses in the CBSE OSM portal, a key platform used by schools affiliated with the board to upload, manage, and process students’ examination marks. The system plays a crucial role in India’s board examination infrastructure, enabling large-scale digital compilation of academic results.

His findings reportedly included issues related to access control and data security, which, if exploited, could have exposed sensitive information related to students and educational institutions. The discovery raised important concerns about the robustness of cybersecurity safeguards in platforms handling national-level academic data.

Instead of misusing the vulnerabilities, Adhikary followed responsible disclosure practices and reported the issues to the relevant authorities. This ensured that corrective action could be taken while maintaining system integrity and protecting user data. His approach has been widely appreciated by cybersecurity professionals as an example of ethical conduct in digital research.

Recognition and entry into advanced cybersecurity research

Following his disclosure work, Adhikary’s selection at C3iHub under the Indian Institute of Technology Kanpur represents a formal entry into advanced threat intelligence and cybersecurity research. The centre focuses on developing solutions for cyber defence, critical infrastructure protection, and AI-driven security systems.

Commenting on the appointment, Manindra Agrawal, Director of IIT Kanpur, said Adhikary has demonstrated strong technical capabilities at a young age and will benefit from the research environment at C3iHub while contributing to ongoing cybersecurity initiatives.

His role will involve open-source intelligence (OSINT) and threat analysis, areas that are increasingly important as cyber threats become more sophisticated and data-driven. The appointment highlights the expanding demand for skilled professionals who can identify, analyse, and mitigate emerging digital risks.

Cybersecurity experts note that Adhikary’s journey reflects a broader shift in India’s technology ecosystem, where ethical hacking and responsible disclosure are increasingly being recognised as valuable contributions rather than informal experimentation. His progression from vulnerability researcher to institutional cybersecurity professional underscores the growing alignment between academic research centres and real-world cyber defence needs.