diff --git a/controller/Changelog.md b/controller/Changelog.md
index 4906a046..0c2b0bb0 100644
--- a/controller/Changelog.md
+++ b/controller/Changelog.md
@@ -5,6 +5,14 @@
 - kiosk: Add a key combination to perform hard refresh (Ctrl-Shift-R)
 - os: Added localization options for Polish and Czech
 
+## Changed
+
+- os: Set noexec for volatile root and persistent storage mounts
+
+## Removed
+
+- os: Remove unnecessary administration capabilities for hardening
+
 # [2023.9.1] - 2024-03-15
 
 # [2023.9.1-VALIDATION] - 2024-03-12