Get the latest tech news

1 bug, $50k in bounties, a Zendesk backdoor

1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies - zendesk.md

Personally, I’ve always found it surprising that these massive companies, worth billions, rely on third-party tools like Zendesk instead of building their own in-house ticketing systems. This meant an attacker could effectively join any ongoing support conversation, and read sensitive information—all because Zendesk didn’t have proper safeguards against email spoofing. If you enjoyed this write-up and want to stay updated on more of my bug hunting adventures, follow me on Twitter/X@hackermondev for future blog posts and insights.

Get the Android app