When creating a new shared object as type of URL category list, the sub-category "Compromised Sites" is missing under "Security">"Security Concern"
This can be caused by an old category source version
In Management Center go to Configuration>Shared Objects>Editor>Manage Category Source and update to the latest version.