diff --git a/docs/NEWS.md b/docs/NEWS.md
index f53a80a..83aa2f8 100644
--- a/docs/NEWS.md
+++ b/docs/NEWS.md
@@ -12,6 +12,7 @@
  * fix: make "`--direct-io`" work correctly with "`--output`" instead of assuming stdout
  * fix: call `posix_fadvise()` on every input, not just the first one
  * fix: write UTC timestamps in debugging mode to avoid lockups in signal handlers
+ * security: added a signed "`MANIFEST`" file to releases
  * cleanup: removed TODO.md, since it's just an outdated copy of the issue tracker
  * cleanup: re-ordered structure members to reduce padding
  * cleanup: improved readability of SIGTTOU handling code