In response to Siobhan’s article over on the the WPMU blog we have released an update to Kappa and Mu which both use the timthumb script.
Our latest theme Xi, does not use this script.
Users can get the latest version of all their themes by visiting the customer downloads page.