diff --git a/NEWS b/NEWS
index 8d656df55c..551e96eb08 100644
--- a/NEWS
+++ b/NEWS
@@ -67,6 +67,9 @@ Changed Functionality
 - The var-extraction-uri.zeek policy does not include the path in the ``uri_vars``
   field anymore.
 
+- By default, the Prometheus HTTP server now listens on ``127.0.0.1`` instead
+  of ``0.0.0.0``.
+
 Removed Functionality
 ---------------------