Thai university student receives NASA recognition for finding security flaw
NASA thanked a first-year Khon Kaen University student who reported a cross-site scripting security flaw through the agency's official disclosure process.
A first-year cybersecurity student at Khon Kaen University has received an official letter of appreciation from the US National Aeronautics and Space Administration (NASA) after identifying and reporting a security vulnerability in the agency's information systems.
The university announced on November 10, 2026, that Thanapon Butsricha, a student at its College of Computing, had discovered a cross-site scripting (XSS) vulnerability, which could allow attackers to insert malicious scripts into web pages.
Using the online pseudonym "nullbyt3z", Thanapon reported the vulnerability directly to NASA's security team through its Vulnerability Disclosure Policy (VDP).
NASA's Office of the Chief Information Officer subsequently issued a letter of appreciation dated November 5, recognising his contribution to protecting the integrity and availability of the agency's information.
Discovery follows responsible disclosure procedures
The student followed the practice of responsible disclosure, under which cybersecurity researchers report vulnerabilities directly to system owners through authorised channels.
The process requires researchers to refrain from exploiting discovered weaknesses or publicly releasing technical details before the vulnerabilities have been addressed.
Thanapon described the recognition as a source of pride after spending approximately one month working to identify the security weakness.
He explained that the main challenge involved locating the vulnerability and ensuring that each report he submitted contained findings that had not previously been reported.
Thanapon expressed satisfaction that his efforts had contributed to improving the security of an internationally recognised organisation's systems.
University highlights technical skills and professional ethics
Assistant Professor Phet Imtongkhum, chair of Khon Kaen University's Cybersecurity Programme, described the achievement as evidence of the technical capabilities and professional standards developed among its students.
He emphasised that internationally competitive cybersecurity skills must be accompanied by professional ethics, which are fundamental to preparing graduates for careers in the field.
The university's College of Computing noted that the recognition reflected its commitment to developing cybersecurity professionals through practical learning and the responsible application of technical knowledge.
The institution aims to equip students with the skills needed to address cybersecurity challenges while ensuring that their expertise is applied ethically and for the benefit of society.
