19-Year-Old Hacker Who Flagged CBSE Flaws Joins IIT Kanpur
Teen Hacker Who Exposed CBSE Flaws Joins IIT Kanpur

Days after making headlines over his claims of security vulnerabilities in CBSE's digital systems, 19-year-old ethical hacker Nisarga Adhikary has joined IIT Kanpur's cybersecurity innovation hub.

Appointment at C3iHub

Adhikary was appointed as an Open-Source Intelligence (OSINT) and Threat Intelligence Engineer at C3iHub, the technology innovation hub at IIT Kanpur. His LinkedIn profile states that he is currently working in OSINT and threat intelligence at the institute.

The appointment comes shortly after Adhikary drew national attention with a series of allegations related to CBSE's digital infrastructure.

Wide Pickt banner — collaborative shopping lists app for Telegram, phone mockup with grocery list

Previous Allegations

In posts on X, Adhikary claimed that scanned answer sheets and question papers linked to CBSE were publicly accessible because of an alleged cloud storage configuration issue. He alleged that an AWS storage bucket containing 2026 answer sheets and question papers could be accessed without authentication.

"Anyone on the internet can download any scanned booklet," he wrote in one of the posts.

Adhikary had earlier also claimed to have found vulnerabilities in CBSE's On-Screen Marking (OSM) portal. In a blog post, he said he had discovered the issues in February and reported them to CERT-In before making them public. According to his claims, some of the vulnerabilities could have allowed unauthorised access to parts of the evaluation system. The allegations quickly gained attention on social media, with several users raising concerns about data security and student privacy.

New Role and Responsibilities

Adhikary's appointment at IIT Kanpur marks a significant development for the young cybersecurity researcher. His new role at C3iHub will involve work related to open-source intelligence and threat intelligence, areas that focus on identifying and analysing potential cyber threats using publicly available information and security research.

This move highlights the growing recognition of ethical hackers in strengthening cybersecurity frameworks in India. Adhikary's transition from a whistleblower to a professional at a premier institute underscores the importance of responsible disclosure and collaboration between researchers and institutions.

Pickt after-article banner — collaborative shopping lists app with family illustration