1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies

Noting that the only bounties were from some of the many 3rd party companies using Zendesk. Zendesk themselves did NOTHING.

As a commentor there said: "The best way to incentivize malicious activity is not to reward philanthropic behaviour. The next exploit for ZenDesk will be sold directly to the darkweb after having read this."

I really like reading or watching stuff like this.

Apart from "Bug bounty reports explained", who hasn't been that active the last months... What are the best sources for this kind of content?

That was a fun read.