USSD attack official notification

I have an HTC that is vulnerable to USSD attack. I am trying to tell the HTC helpdesk about this issue, but they tell me that unless there is an official news from android team about this, they will ignore the huge amount of articles from blogs and websites that talk about this. There is any official android article about this that I can link to them?