diff --git a/CHANGELOG.md b/CHANGELOG.md
index 70526898..49013ffc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -34,6 +34,10 @@
 - Don't show boosts and likes for "all" and "local" in timelines (#781)
 - Fix liking and boosting posts on remote instances (#762)
 
+### Security
+
+- Validate spoofing of Create activity
+
 ## [0.4.0] - 2019-12-23
 
 ### Added