A high-severity security bug is just a “concern” now? Companies should always come out in front of these things. Call it what it is. Your blog post should be

A high-severity security bug is just a “concern” now? Companies should always come out in front of these things. Call it what it is. Your blog post should be something like “We Screwed Up - Security Flaw Post-Mortem”.