1 BUG, $50,000+ IN BOUNTIES, HOW ZENDESK INTENTIONALLY LEFT A BACKDOOR IN HUNDREDS OF FORTUNE 500 COMPANIES

Summary from the TLDR Web Dev newsletter

A 15-year-old bug hunter discovered a vulnerability in Zendesk's email collaboration feature that allowed attackers to access customer support tickets from any company using the service. This exploit was initially dismissed by Zendesk's bug bounty program as "out of scope," but subsequent public disclosure of the vulnerability forced Zendesk to take action. The bug hunter then discovered a second, more serious exploit that could allow attackers to gain access to private Slack workspaces using Zendesk, which was fixed later.