diff --git a/api/CHANGELOG.md b/api/CHANGELOG.md
index 0210adf29a..df49eced7f 100644
--- a/api/CHANGELOG.md
+++ b/api/CHANGELOG.md
@@ -9,6 +9,10 @@ All notable changes to the **Prowler API** are documented in this file.
 - `okta` provider support [(#11184)](https://github.com/prowler-cloud/prowler/pull/11184)
 - `resource.metadata` attribute included in `/api/v1/findings?include=resources` [(#11187)](https://github.com/prowler-cloud/prowler/pull/11187)
 
+### ✨ Changed
+
+- Attack Paths run-query response strips account/root nodes and returns per-query attack `outcome` metadata; the queries catalog only surfaces real attack paths (inventory queries hidden) [(#11357)](https://github.com/prowler-cloud/prowler/pull/11357)
+
 ---
 
 ## [1.28.0] (Prowler v5.27.0)
diff --git a/ui/CHANGELOG.md b/ui/CHANGELOG.md
index e4859d1834..bcf7151c93 100644
--- a/ui/CHANGELOG.md
+++ b/ui/CHANGELOG.md
@@ -9,6 +9,10 @@ All notable changes to the **Prowler UI** are documented in this file.
 - `okta` provider support with OAuth 2.0 private-key JWT credentials form (client ID + PEM private key) [(#11213)](https://github.com/prowler-cloud/prowler/pull/11213)
 - "Resource Metadata / Evidence" tab in the finding detail drawer [(#11187)](https://github.com/prowler-cloud/prowler/pull/11187)
 
+### ✨ Changed
+
+- Attack Paths graph redesigned: default view groups nodes by resource type with expand-on-click, ends in a terminal Outcome node, removes the account hub, and adds directional arrowheads [(#11357)](https://github.com/prowler-cloud/prowler/pull/11357)
+
 ---
 
 ## [1.27.0] (Prowler v5.27.0)