Security announcements

MSA-08-0023: CSRF in messaging setting