- cross-posted to:
- [email protected]
- cross-posted to:
- [email protected]
1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies - zendesk.md
1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies - zendesk.md
Lmao, Zendesk made their own post (edit: a troll account linked it acting as them, but the actual Zendesk post is still something else) saying the person who disclosed this violated ethical principles while also saying they (zendesk) discovered this issue.
That looks to be a troll. ZendeskTeam account was created 1 hour ago and is not part of the org.
But the help article linked is pathetic.
Oh, thank god. 🤦 I guess the post itself still stands as terrible though
It’s a terrible way to take your company rank on these security forums.
When a company does that (pretend like they discovered the issue to avoid paying a bounty), they often end up on a shit list where bored hackers pentest them for funsies and then release the vulnerability in the wild.
Source: Im on the team at my job that pays hackers and their streams frequently broadcast shitty companies that refuse to pay.