If there is a Telstra security contact on the list can they please contact me. I've found what looks like a vulnerability in your billing SSO system. T.