I don't consider this a bug but rather a decision made that it would be an acceptable measure to show the title of the page. This can be prevented if the news plugin doesn't set the header. Alternatively, use a fully restricted PAGE for secret news items instead of secrecy on element level. - kasper