IIT Kanpur Hires Teen Who Flagged CBSE OSM Security Flaws

Teen Cybersecurity Researcher Lands IIT Kanpur Role After CBSE OSM Controversy

New Delhi, June 11: In a development that has drawn attention across India's education and cybersecurity sectors, IIT Kanpur has hired 19-year-old cybersecurity researcher Nisarga Adhikary shortly after he brought alleged security vulnerabilities in the Central Board of Secondary Education's On-Screen Marking (OSM) platform into the national spotlight.

Adhikary has been appointed as an Open-Source Intelligence (OSINT) and Threat Intelligence Engineer at IIT Kanpur's cybersecurity and technology innovation centre, C3iHub, according to reports published on Thursday.

The appointment marks a remarkable turn for the teenager, whose blog post detailing alleged weaknesses in CBSE's digital evaluation infrastructure sparked a heated discussion about cybersecurity standards in India's education system.

How the Controversy Began

The story traces back to February this year when Adhikary said he identified several vulnerabilities in the OSM platform, a digital system associated with the evaluation process of board examination answer sheets.

According to his account, he reported the issues to India's cyber incident response agency, CERT-In, before making his findings public months later. He claimed the platform contained multiple critical flaws that could potentially affect security controls.

One of the concerns highlighted in his report involved authentication and access management mechanisms. Adhikary alleged that some weaknesses could allow unauthorized access if left unresolved.

His claims quickly gained traction online, especially among students and parents already questioning aspects of the newly introduced digital evaluation process.

CBSE Rejected Claims of a Security Breach

The Central Board of Secondary Education responded by strongly denying reports that its operational examination evaluation system had been compromised.

CBSE clarified that the portal referenced in the teenager's claims was not the live system used for evaluating answer sheets and maintained that there had been no security breach affecting the official OSM infrastructure.

The board stated that the platform shown in screenshots circulating online was linked to a testing environment rather than the production system used for actual examination work.

Despite the clarification, the controversy continued to attract public attention because of broader concerns regarding the rollout of digital marking systems and student grievances over evaluation outcomes.

IIT Kanpur Took Notice

What transformed the episode from a cybersecurity disclosure into a career opportunity was the response from IIT Kanpur.

Reports indicate that IIT Kanpur Director Manindra Agrawal became aware of Adhikary's work after reading his detailed blog post. The institute subsequently reached out to the teenager and invited him for discussions.

Agrawal reportedly met Adhikary in New Delhi while IIT experts were assisting authorities in examining issues linked to the OSM system. Following those interactions, IIT Kanpur offered him a position at C3iHub.

Speaking about the appointment, Agrawal described the teenager as talented while emphasizing that IIT Kanpur would provide an environment for him to further develop his cybersecurity skills.

The move is unusual because Adhikary is only 19 years old and is not currently pursuing a conventional university degree programme. Yet his demonstrated cybersecurity capabilities convinced one of India's premier technical institutions to bring him on board.

Why This Matters for Indian Education

The episode highlights a growing challenge facing educational institutions across India: securing increasingly digital academic systems.

From examination management and result processing to online evaluation and admissions, schools and universities now rely heavily on technology infrastructure. Any vulnerability in these systems can potentially affect millions of students.

West Bengal, including educational centres such as Haldia, Kolkata, Durgapur and Siliguri, has witnessed a steady increase in digital learning platforms, online assessments and e-governance systems in education. The need for strong cybersecurity protections is becoming more urgent with each passing year.

Experts say ethical hackers and independent security researchers often play an important role in identifying weaknesses before malicious actors can exploit them.

"Responsible vulnerability disclosure has become a key pillar of modern cybersecurity. Institutions that engage constructively with researchers tend to improve their security posture significantly," said Kolkata-based cybersecurity analyst Arindam Sen.

A New Path for Young Talent

Adhikary's appointment has also triggered discussions about alternative career pathways in technology.

Traditionally, elite institutions and employers have focused heavily on formal academic qualifications. However, the cybersecurity industry increasingly values demonstrable skills, practical problem-solving ability and real-world experience.

Industry observers note that ethical hacking, threat intelligence and digital forensics are among the fastest-growing areas within India's technology sector.

According to cybersecurity recruitment firms, demand for skilled professionals continues to outpace supply as government agencies, educational institutions, banks and private companies strengthen their cyber defences.

For many young students interested in cybersecurity, Adhikary's story serves as a reminder that practical expertise can open doors even before completing higher education.

Mixed Reactions Online

Social media reactions have been largely supportive.

Many users praised IIT Kanpur for recognizing technical talent irrespective of age or academic credentials. Others argued that institutions should encourage responsible disclosure rather than discourage young researchers who identify security weaknesses.

At the same time, some commentators have called for a more transparent investigation into the original OSM controversy to determine the full extent of the issues raised and whether all vulnerabilities were adequately addressed.

The broader debate over CBSE's digital evaluation system is unlikely to disappear soon, especially as students continue to seek clarity regarding examination processes and technological safeguards.

What Happens Next

For now, the spotlight has shifted from controversy to opportunity.

At IIT Kanpur's C3iHub, Adhikary will work on projects related to threat intelligence, cybersecurity research and open-source intelligence gathering. The role places him at the heart of one of India's most prominent cyber-defence innovation centres.

The appointment also sends a message to educational institutions and technology organisations across the country: cybersecurity expertise can emerge from unexpected places, and recognising young talent may be just as important as fixing vulnerabilities.

As India's digital infrastructure continues to expand, stories like this may become increasingly common, where a teenager's curiosity and technical skill evolve into a career shaping the future of cybersecurity.