diff --git a/doc/faq.asciidoc b/doc/faq.asciidoc
index 5fd36d67b..7225f0f4e 100644
--- a/doc/faq.asciidoc
+++ b/doc/faq.asciidoc
@@ -87,12 +87,14 @@ features are also enabled as a second line of defense.
 http://wiki.qt.io/QtWebKit[QtWebKit] is also supported as an alternative
 backend, but hasn't seen new releases
 https://github.com/annulen/webkit/releases[in a while]. It also doesn't have any
-process isolation or sandboxing.
+process isolation or sandboxing. See
+https://github.com/qutebrowser/qutebrowser/issues/4039[#4039] for more details.
 +
-Security issues in qutebrowser's code happen very rarely (as per March 2018,
-there has been one security issue caused by qutebrowser in over four years) and
-are fixed timely. To report security bugs, please contact me directly at
-mail@qutebrowser.org, GPG ID
+Security issues in qutebrowser's code happen very rarely (as per July 2018,
+there have been three security issues caused by qutebrowser in over 4.5 years).
+Those were handled appropriately
+(http://seclists.org/oss-sec/2018/q3/29[example]) and fixed timely. To report
+security bugs, please contact me directly at mail@qutebrowser.org, GPG ID
 https://www.the-compiler.org/pubkey.asc[0x916eb0c8fd55a072].
 
 Is there an adblocker?::