Md Shariar Shanaz Shuvon, a 17-year-old self-taught ethical hacker from Bangladesh, has discovered a serious privacy bug in NASA’s system. The flaw allowed access to sensitive Earth data. Shuvon responsibly reported the bug through NASA’s Vulnerability Disclosure Program, earning an official letter of appreciation in February 2025.
Currently studying IT in Malaysia and working as a cybersecurity analyst, Shuvon has also found bugs in Sony and Meta. He specializes in IDOR and data disclosure vulnerabilities and was ranked top 1 globally on TryHackMe.
Despite global success, Shuvon dreams of strengthening cybersecurity in Bangladesh and raising awareness about digital threats. His journey began in Class 7 using YouTube and free resources. “Bug hunting is just the beginning,” he says.