ZENDESK'S SUBDOMAIN REGISTRATION EXPOSED TO PHISHING, PIG BUTCHERING SCAMS

Summary from the TLDR InfoSec newsletter

A security vulnerability in Zendesk's subdomain registration feature allows cybercriminals to conduct phishing and investment scams. CloudSEK researchers discovered that attackers can create fake subdomains resembling legitimate brands to deceive victims. This poses a significant risk as attackers can send convincing phishing emails and manipulate users into sharing sensitive information or funds.