IIT Kanpur has appointed 19-year-old [1] cybersecurity researcher Nisarga Adhikary as an OSINT and Threat Intelligence Engineer at its C3iHub.

The appointment follows Adhikary's responsible disclosure of security vulnerabilities within the Central Board of Secondary Education (CBSE) On-Screen Marking portal. This transition from an external researcher to a professional role at a premier technical institute highlights the growing importance of ethical hacking in protecting national digital infrastructure.

Adhikary gained attention after identifying and reporting flaws in the CBSE system, which is used for the digital marking of student examinations. Rather than exploiting the gaps for personal gain or malicious purposes, he followed the principles of responsible disclosure to ensure the vulnerabilities were patched [1], [2], [3].

In response to these findings, IIT Kanpur's C3iHub recruited Adhikary to strengthen its internal cybersecurity capabilities. The institute aims to leverage his skills in Open Source Intelligence (OSINT), and threat intelligence to better defend against evolving digital threats [1], [2], [3].

His role at the institute is designed to support the broader Indian cybersecurity ecosystem. By integrating young talent who have demonstrated real-world capabilities, the institution seeks to bridge the gap between academic study and active threat mitigation [1], [3].

The move reflects a shift in how some Indian institutions view unauthorized but ethical probing of systems. While such activities can often lead to legal disputes, the recruitment of Adhikary suggests a preference for absorbing skilled researchers into formal security frameworks [2], [3].

“IIT Kanpur has appointed 19-year-old cybersecurity researcher Nisarga Adhikary as an OSINT and Threat Intelligence Engineer.”

The hiring of a teenage researcher by a top-tier institution like IIT Kanpur signals a strategic shift toward 'bug bounty' mentalities within Indian public infrastructure. By rewarding responsible disclosure with employment rather than prosecution, the state encourages ethical hackers to report vulnerabilities, potentially reducing the risk of catastrophic data breaches in critical education and governance portals.