diff --git a/HACKING b/HACKING
index 551216bb45..8c72bdd3e2 100644
--- a/HACKING
+++ b/HACKING
@@ -103,6 +103,9 @@ GitHub) and then running these commands:
         python infra/helper.py build_fuzzers --sanitizer memory systemd
         python infra/helper.py run_fuzzer systemd fuzz-foo
 
+If you find a bug that impacts the security of systemd, please follow the
+guidance in .github/CONTRIBUTING.md on how to report a security vulnerability.
+
 For more details on building fuzzers and integrating with OSS-Fuzz, visit:
 
         https://github.com/google/oss-fuzz/blob/master/docs/new_project_guide.md