While fixing #11574, I noticed we link to external security resources. We should verify that all links in are valid and up to date.