diff --git a/modules/misc/news/2026/01/2026-01-10_00-16-48.nix b/modules/misc/news/2026/01/2026-01-10_00-16-48.nix
new file mode 100644
index 00000000..3c64b931
--- /dev/null
+++ b/modules/misc/news/2026/01/2026-01-10_00-16-48.nix
@@ -0,0 +1,9 @@
+{ config, ... }:
+{
+  time = "2026-01-09T23:16:48+00:00";
+  condition = config.services.ssh-agent.enable;
+  message = ''
+    There is a new 'services.ssh-agent.pkcs11Whitelist' option to whitelist
+    PKCS#11 and FIDO authenticators.
+  '';
+}