A big moment of pride for Thailand's IT community!

Thanaphon Butsricha (alias nullbyt3z), a first-year Cybersecurity student at the College of Computing, Khon Kaen University, northeastern Thailand, has received an official letter of appreciation from NASA's Office of the Chief Information Officer (OCIO) on 5 November 2026.

Under NASA's Vulnerability Disclosure Policy (VDP), Thanaphon discovered and reported a Cross-Site Scripting (XSS) vulnerability in one of NASA's systems. In simple terms, this flaw could have allowed attackers to inject malicious scripts into web pages.

He spent over a month searching for and verifying the flaw to make sure his report did not duplicate earlier findings. He also followed the principles of Responsible Disclosure to the letter. He reported the issue directly to NASA's security team, did not use the data for personal gain, and kept the details private until the bug was fixed.

This achievement brings pride to Khon Kaen University and shows the technical skills and strong ethics of Thai youth, who are ready to make a positive impact and protect cybersecurity on a global stage.

Congratulations, Thanaphon!