diff --git a/CHANGELOG.md b/CHANGELOG.md
index 90ab8a7d8..bf105794e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -41,3 +41,4 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ### Security
 - Address minor issues discovered by Dlint. #1075
+- Generate random passwords when creating a new user (create user PBA, ms08_67 exploit). #1174