Any update on this security issue?