Explained: Why CERT-In asked a cybersecurity researcher to stop publicly disclosing vulnerabilities?

On August 28, CERT-In wrote to cybersecurity researcher Nisarga Adhikary, asking him to stop public disclosures of the vulnerabilities he finds while the “coordination/remediation” of the vulnerabilities is still underway. But Adhikary refused to stop speaking about the vulnerabilities, especially if the concerned organizations or CERT-In don’t respond to the disclosed vulnerability within a general timeframe like 3-4 weeks. “I do this research independently, for free, to help sec