diff --git a/NEWS b/NEWS
index 3ed552211..d7dc6c079 100644
--- a/NEWS
+++ b/NEWS
@@ -15,6 +15,8 @@
 - added ability to delete events from a keypress
 - added the "remove" command to "sogo-tool", in order to remove user data and settings
 - added the ability to export address books in LDIF format from the web interface
+- improved the webmail security by banning a few sensitive tags and handling
+  "object" elements
 
 1.2-20100219 (1.2.1)
 --------------------