diff --git a/docs/release-notes.asciidoc b/docs/release-notes.asciidoc
index 4aabfbbdb2..7f9585fd17 100644
--- a/docs/release-notes.asciidoc
+++ b/docs/release-notes.asciidoc
@@ -3,6 +3,7 @@
 
 This section summarizes the changes in each release.
 
+* <<release-notes-8.19.8, {elastic-sec} version 8.19.9>>
 * <<release-notes-8.19.8, {elastic-sec} version 8.19.8>>
 * <<release-notes-8.19.7, {elastic-sec} version 8.19.7>>
 * <<release-notes-8.19.6, {elastic-sec} version 8.19.6>>
diff --git a/docs/release-notes/8.19.asciidoc b/docs/release-notes/8.19.asciidoc
index 437b34ccb6..48ca6b16fb 100644
--- a/docs/release-notes/8.19.asciidoc
+++ b/docs/release-notes/8.19.asciidoc
@@ -1,6 +1,31 @@
 [[release-notes-header-8.19.0]]
 == 8.19
 
+[discrete]
+[[release-notes-8.19.9]]
+=== 8.19.9
+
+[discrete]
+[[features-8.19.9]]
+==== New features
+* Hardens {elastic-defend} against cloud filter rebinding.
+
+[discrete]
+[[enhancements-8.19.9]]
+==== Enhancements
+* Shows session view in full height ({kibana-pull}245888[#245888]).
+* Shows analyzer in full height ({kibana-pull}245857[#245857]).
+* Improves general system responsiveness while {elastic-defend} is installed.
+* Reduces the CPU of {elastic-defend} when suppressing activity from Trusted Applications on Windows.  This may be especially noticeable in applications that are JIT-heavy like Powershell and .NET.
+
+[discrete]
+[[bug-fixes-8.19.9]]
+==== Fixes
+* Standardizes how to log errors ({kibana-pull}245030[#245030]).
+* Fixes a crash in {elastic-defend} scan response actions, and suppresses popups when scanning for malware in the background.
+* Fixes an issue that could prevent {elastic-defend} from properly handling upgrades when Tamper Protection is enabled.
+* For Linux {elastic-defend}, fixes a bug where the legacy network event source (debugfs/kprobes) would miss network events for non-blocking connect calls.
+
 [discrete]
 [[release-notes-8.19.8]]
 === 8.19.8