“Insecure result” information: The type of problem/attacks mentioned should be explained, users may not know what all attacks mean or how to mitigate.
Recommendations:
Explain problems/attacks by adding links to explanations that contain: “Why is this a problem?” “How to fix it?” The “how to fix it” should ideally be copy-paste-able.