diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6716c7bc2..2a1363041 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,7 +2,9 @@
 
 ## v1.0.0
 
-Announcement scheduled for october 15
+### SECURITY
+
+ * Add more headers to HTTP signature to avoid actor impersonation by replaying modified signed HTTP requests (thanks Thibaut Girka)
 
 ### Bug fixes