Adam Mawlong

RT does not imply endorsement

[Meghalaya Tourism @meghtourism]

ATTENTION TOURISTS & VISITORS

Given the current law and order situation in Shillong, the Tourism Department urges all visitors and tourists who need assistance to contact the Tourism Toll-Free Helpline at 1800-599-2026.

Please stay alert, follow official advisories, and reach out if you need assistance.

Your safety is our top priority.

[Dr.Medusa @ms_medusssa]

A death threat. Given openly. Under one of my videos. I usually get them in my DMs.

He also assures no jail time for my would be k!ller. He is an army brat as per his bio.

I don't know where he lives so i don't know what police to tag. Anyone has any pointers?

[Dr.B.Karthik Navayan @Navayan]

Supreme Court allows convicted rape-of-minor convict Asaram Bapu a full-time trained caregiver of his choice in jail.

Years earlier, 83-year-old undertrial Father Stan Swamy, suffering from Parkinson’s, had to fight for weeks just to get a straw and sipper so he could drink water without spilling. Medical bail repeatedly denied. He died in custody.

Same system. Same courts. Vastly different urgency for basic human dignity. Selective compassion isn’t justice. It’s the opposite.

[ASHUTOSH MISHRA @JournoAshutosh]

You guys need to talk to each other.

[Nidhi Razdan @Nidhi]

So the police are tracking down restaurants that have sent food to jantar mantar and told them to stop supplying “free food or making bulk deliveries “ @IndianExpress

[TIMES NOW @TimesNow]

Inside Track on Key Cabinet Meet:

- PM asks Ministers to boost Instagram presence.

- PM to Ministers: Get active on Instagram, don’t limit yourself to X

- Prime Minister tells Ministers: Share reels on government schemes, reach out to youth through Instagram

[TIMES NOW @TimesNow]

Inside Track on Key Cabinet Meet:

- PM asks Ministers to boost Instagram presence.

- PM to Ministers: Get active on Instagram, don’t limit yourself to X

- Prime Minister tells Ministers: Share reels on government schemes, reach out to youth through Instagram

[Adam Mawlong @Adam1641]

@gonse @it_unprofession

[Pilib De Brún (Phil Brown) @Malachians]

Newcastle had to sell him to comply with FFP while he is currently signing for a football club who have been charged with 115 breaches of premier leagues financial rules. An independent panel was convened to hear these charges which was concluded in 2024. For reasons unknown to everyone we still don’t have a verdict on this. There is something deeply wrong about that

[João Vianna @vianna_jao]

Fizeram um anime da atuação impecável do goleiro Vozinha totalmente com IA

[Capitán Swing @Capitan_Swing]

World Cup 2026

[Priyanka Chaturvedi🇮🇳 @priyankac19]

Smriti Irani ji of the BJP can contest with three different educational qualifications in her LS affidavits, EC ignores all complaints but Meenakshi Natarajan of the Congress has her RS nomination cancelled because her affidavit doesn’t mention some obscure complaint with no FIR & zero chance to explain to EC.

[Liverpool FC @LFC]

We can confirm Andoni Iraola has agreed a deal to become the club’s new head coach ahead of the 2026-27 season 🤝

[Urvashi Prasad @urvashi01]

16 women die every day in India because of dowry. Not because we lack laws. Because we lack the will to mean them. My piece in @htTweets on Twisha Sharma, Deepika Nagar, and the systems that failed them. A 🧵

[Manish Sharma @Cheekytogeeky]

be @ni5arga

→ 19 years old, from West Bengal, studied in Delhi for a few years
→ just finished his own Class 12 exams in 2026
→ calls himself a hobbyist cybersecurity researcher
→ says he is an engineer, not a hacker
→ built an OSINT engine, a stock-tracking TUI, a pastebin in Rust
→ once found bugs in FOSS United and disclosed them quietly
→ just another CBSE student watching his own board roll out a new digital marking system

then he opened the portal

→ CBSE moves Class 12 evaluation to On-Screen Marking, 1.8 million students affected
→ Nisarga sees the portal link is fully public, gets curious
→ opens DevTools, downloads the Angular JavaScript bundle
→ first vulnerability found in 30 minutes
→ a literal master password sitting in plain text inside the frontend code
→ enter it, the OTP field auto-fills, the entire login flow gets bypassed
→ OTP validation happens in the user's browser, not on the server
→ no route guards, every internal page reachable by editing browser storage
→ password reset API never checks the old password
→ systemic IDOR across the entire API, change one value in sessionStorage, become any examiner
→ outcome: take over any teacher account, view answer sheets, edit marks

25 February 2026. He reports everything to CERT-In the same day.

→ CERT-In asks for a screen recording, he sends a full walkthrough
→ acknowledgement comes back as a boilerplate reply
→ reference number assigned: CERTIn-16590126
→ he follows up multiple times. no response.
→ three months pass. portal still live. Class 12 results released. vulnerabilities still there.
→ 22 May: publishes the blog post and a thread on X
→ Deedy Das, Satish Acharya, Internet Freedom Foundation amplify it
→ the post goes viral
→ CBSE issues a clarification: that was just a test portal, no breach
→ the URL CBSE cited in their own tweet was not even a registered domain
→ a friend buys the domain and points it at Nisarga's blog
→ CBSE quietly deletes the tweet

then it gets worse

→ 25 May: finds an SQL injection vulnerability on the live production portal
→ reports to CERT-In, gets a one-line thank you
→ gains admin access to the live https://t.co/1WpmNGsczK server
→ portal stays up for four more hours
→ he uploads anime videos and memes, links them publicly from CBSE servers
→ plays a viral Japanese song on a CBSE page, makes the news for it
→ CBSE finally takes the whole portal down

then he reads the database

→ master table accessed: 10 GB, 9.3 million records
→ examiner names, addresses, school names, bank account details
→ passwords stored in plain text
→ login tokens anyone can paste into a browser to log in as that user
→ 31 May: finds a second live CBSE production portal, 45,074 records of failed payments
→ emails, phone numbers, payment IDs, order IDs, all readable
→ 31 May, the bigger one: an AWS S3 bucket is misconfigured
→ ListObjectsV2 works without authentication, the bucket root is listable
→ samples pulled from 18 lakh scanned 2026 answer sheets, every subject
→ multiple institutions sharing the same bucket
→ also notices something strange in the scans: bedsheets visible in the background of answer sheets CBSE paid for proper scanners to handle

CBSE responds

→ posts an AI-generated image saying the system is robust and secure
→ three days later admits some vulnerabilities existed and have been contained
→ refuses to name the cybersecurity firm doing the audit
→ claims they tried contacting him. he says they have not.

→ Internet Freedom Foundation writes to the Ministry of Education and CERT-In
→ asks for an investigation into CBSE, a review of the contract with vendor Coempt EduTeck, a full audit

→ he points out he could have sold this data and made a lot of money
→ he did not. he is a CBSE student too.
→ his own analogy: the door wasn't just unlocked. the key was lying on the ground in front of everyone.

a 19-year-old with a anima pff broke a national exam evaluation system in 30 minutes with browser developer tools and the government is still pretending it was a test environment

[Liverpool FC @LFC]

James Milner has announced his retirement from football. Congratulations on an incredible career, James ❤️

[Natasha Awhad @NatashaASpeaks]

🚨🚨BREAKING: Bombay High Court Chief Justice Shree Chandrashekhar has been recommended by the Supreme Court Collegium for elevation to the Supreme Court.

Some of the key rulings during his tenure:

• Dismissed the PIL seeking recovery of expenses incurred on providing Z+ security to RSS chief Mohan Bhagwat.

• Set aside MMRDA penalty notices linked to BKC plots and ordered refunds exceeding ₹700 crore, including to Reliance Industries.

• Dismissed the plea seeking a CBI probe into bribery allegations involving Adani Green Energy and associates.

• Cleared the transfer of Kanjurmarg land for the Metro-6 car shed project.

• Allowed the felling of 45,675 mangroves for the Versova-Bhayandar coastal road project, citing demonstrable public interest.

• Quashed charges against the last four remaining accused in the 2006 Malegaon blasts case.

• Upheld the acquittal of all 22 accused in the Sohrabuddin Shaikh encounter case.

Justice Chandrashekhar now awaits formal appointment by the Centre.

The conveyor belt between judicial deference and judicial elevation continues to move with remarkable efficiency! 😂

[Liverpool FC @LFC]

Captain Fantastic 📸✨

[Ashish Joshi @bismil_prasad]

Kind attention Chairman CBDT @IncomeTaxIndia , @FinMinIndia

The officer in the tagged tweet has violated the following sub-sections under section 1 of Rule 3 of CCS (Conduct Rules), 1964
(1) Every Government servant shall at all times--
(iii)do nothing which is unbecoming of a Government servant.
(iv) commit himself to and uphold the supremacy of the Constitution and democratic
values;
(v) defend and uphold the sovereignty and integrity of India, the security of the State,
public order, decency and morality;
(vi) maintain high ethical standards and honesty;
(vii) maintain political neutrality;
(x) maintain responsiveness to the public, particularly to the weaker section;
(xi) maintain courtesy and good behaviour with the public;