News security flaw