IIT Kanpur Hires Teen Who Exposed CBSE Flaws

Talent never goes waste. It gets recognized some or the other place. Opportunities knock doors in an unprecedented manner. Without any resume or taking any competitive test, 19-year-old Nisarga Adhikary, who flagged multiple security vulnerabilities in CBSE’s on-screen marking (OSM) portal, was recruited by the Indian Institute of Technology (IIT) Kanpur for a full-time role in its national cybersecurity centre, the IITK C3i hub. The appointment was done basing on a post on his blog.

According to a report in a leading English daily, Adhikary was contacted by IIT Kanpur’s director Manindra Agrawal after the latter read his blog post on the vulnerabilities in the CBSE OSM portal, posted on May 22.

Directors and other experts from IIT-Madras and IIT-Kanpur camped at the CBSE headquarters to identify the vulnerabilities on the two portals — OSM portal OnMark, and another portal for procuring answer sheets and applying for re-evaluation.

Reportedly, Adhikary joined the C3i hub as an Open-Source Intelligence (OSINT) and threat intelligence engineer under its cybersecurity team on contractual basis.

He will work on analyzing actionable information gathered from publicly available sources and identifying vulnerabilities in websites and applications, that would allow assisting organisations detect and address potential security threats.

It is worth remembering that earlier this month, the CBSE invited Adhikary to meet an IIT expert team to flag security gaps in its IT ecosystem. Adhikary pointed out to critical vulnerabilities in the portal, storing sensitive student data, last month itself but the CBSE denied any breach in its data security at that time.

The IITK C3i Hub, also called IHUB NTHAC Foundation, is a Section 8 company established under the National Mission on Interdisciplinary Cyber-Physical Systems (NM-ICPS).

Another Class 12 student, Sarthak Sidhant, also pointed out that several eligibility and evaluation criteria were modified between different rounds of tendering. He specifically highlighted the removal of clauses pertaining to poor performance. 

Sidhant pointed that earlier version of the tender included provisions that could make bidders disqualified for reasons including poor performance, failure to complete contractual obligations, or financial inadequacies. Subsequently, they were removed in later versions of the tender.

Responding to Adhikary’s appointment, Sidhant posted on X: “@IITKanpur hi though like im open to work lol.”

He also posted on X, tagging the Comptroller and Auditor General (CAG) of India, and said:

“@IndiaCAG i did what your job should be, AG office doranda is near my home, when do i start.”…

X