diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7576a1a9d..9dbfbf816 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -18,12 +18,14 @@ Unlock powerful malware analysis with capa's new [VMRay sandbox](https://www.vmr
 
 ### Breaking Changes
 
-### New Rules (4)
+### New Rules (6)
 
 - linking/static/minhook/linked-against-minhook jakub.jozwiak@mandiant.com
 - linking/static/sqlite3/linked-against-sqlcipher wballenthin@google.com
 - host-interaction/network/traffic/filter/delete-network-filter-via-wfp-api jakub.jozwiak@mandiant.com
 - host-interaction/network/traffic/filter/enumerate-network-filters-via-wfp-api jakub.jozwiak@mandiant.com
+- nursery/check-thread-suspend-count-exceeded ervinocampo@google.com
+- nursery/create-thread-bypassing-process-freeze ervinocampo@google.com
 -
 
 ### Bug Fixes
diff --git a/rules b/rules
index 123d6f73d..534ee22fc 160000
--- a/rules
+++ b/rules
@@ -1 +1 @@
-Subproject commit 123d6f73dc45c7319dd9e5bf73930aa81269806d
+Subproject commit 534ee22fcc51c5f6a592b60114e5305ff8b292b3