When NASA's Advanced System Was Breached by an Elementary Student from Boyolali

In a remarkable display of digital prowess, a 12-year-old elementary school student from Boyolali, Indonesia, has successfully identified a vulnerability in the sophisticated cybersecurity systems of NASA, the U.S. National Aeronautics and Space Administration. Ibrahim Al Abrar, a sixth-grader at SDN 3 Genengsari, achieved this feat using only a laptop and AI assistance.

Ibrahim's journey into cybersecurity began in fourth grade, fueled by a passion for computer programming. He was inspired to test NASA's defenses after a peer in an IT community failed to detect a system flaw. Following instructions from a NASA publication on identifying cybersecurity gaps, Ibrahim discovered a "broken link hijacking" vulnerability. This flaw allows a dead link to be taken over and used for phishing attacks under NASA's name.

“

So the name is broken link hijacking, where the link is dead, then I can take it over and use it for phishing using the NASA name.

His investigation involved a simple laptop and AI platforms like Deepseek, along with YouTube tutorials. The process of finding the vulnerability took six days, during which he examined over 200 links. His father, Aminudin, a computer and network engineering teacher, provided support in his early learning stages.

Ibrahim reported his findings to NASA multiple times. While one report was rejected and another deemed a duplicate, his fourth attempt was accepted. NASA responded by sending him an appreciation letter, acknowledging his contribution. Ibrahim, who aspires to become a cybersecurity professional, chose to report the vulnerability rather than exploit it, a decision that earned him recognition from the space agency.

“

When I received the letter from NASA, I was shocked, I couldn't believe it.