Update reference to attack in ChangeLog

We couldn't do that before the attack was public
1 file changed