diff --git a/changelog.d/activitypub-spoofing.security b/changelog.d/activitypub-spoofing.security
new file mode 100644
index 000000000..3e6baffb6
--- /dev/null
+++ b/changelog.d/activitypub-spoofing.security
@@ -0,0 +1 @@
+ActivityPub: Fixed failed-signature inbox retry handling and signer identity checks to prevent spoofed remote activities from being processed