The email from Slack to reset passwords is legit
Emails sent to a number of Slack users about their account password being reset are genuine, with the work communications app's developers doing so after the discovery of a security-related bug in the tool.