Cert-In asks teen researcher to hold off public vulnerability disclosures

The Indian Computer Emergency Response Team (Cert-In), the government’s cybersecurity nodal agency, has asked a 19-year-old security researcher to hold off on publicising vulnerabilities while they are being fixed — a request the researcher rejected in a sharply worded reply accusing the agency of incompetence