news: Add entry for user account activation vulnerability.