Google to Allow Competing Android App Stores Directly Inside Play Store After Epic Games Court Ruling
Google is set to open its official Google Play store to competing Android app marketplaces, allowing third-party catalogs to be distributed directly through the platform starting July 22. The move follows a court ruling in the multi-year antitrust case brought by Epic Games, which began in 2020 when Fortnite introduced direct V-Bucks purchases that bypassed Google’s 30% commission rules, leading to the game’s removal from both Google Play and the Apple App Store.
The court found that Google had systematically hindered device manufacturers from promoting or pre-installing alternative app stores, thereby strengthening its monopoly over Android app distribution. One of the key remedies requires Google to host approved competing stores inside Google Play itself. Attempts by Google and Epic to substitute this measure with a softer “Registered App Stores” program—under which users would still need to download rival stores manually—were rejected by the judge, who questioned whether such an approach would meaningfully increase competition.
Under the approved framework, participating stores will receive default access to the Google Play app catalog. Individual developers can still choose to prohibit distribution of their applications through specific marketplaces. Google will charge an annual verification fee of $5,000 per store. In return, approved stores must block malicious applications, respect copyright rules, and maintain the ability to update and remove apps. Any marketplace whose share of suspicious installations exceeds 1% may be removed from the program.
The changes are expected to apply primarily in the United States for now. Nevertheless, the ruling represents a significant shift for the Android ecosystem: Google Play will no longer merely tolerate competitors but will be required to actively distribute them to its users.
Related articles
Why Russia Needs Specialized Circumvention Tools Beyond Standard VPNs
The developers of Tunnel Kitten explain why another circumvention project is necessary despite the availability of numerous VPN services and solutions like AmneziaWG. A prolonged outage affected many long-term users, damaging trust and requiring ongoing fixes. Standard VPNs do not address the core issue: creating and maintaining tools to bypass internet blocks has been criminalized in Russia. This legal asymmetry makes public VPN services and self-hosted solutions risky or insufficient for users facing state-level censorship. Tunnel Kitten positions itself as a project focused on a different task that accounts for these legal realities. The team emphasizes that the problem is not merely technical but tied to the criminalization of circumvention efforts.
US Presidential Memo Authorizes Selected Private Companies to Join Federal Cyber Operations Against Foreign Criminal Groups
The United States government has established a formal program allowing vetted private-sector companies to participate in offensive cyber operations targeting foreign criminal organizations. Signed by President Donald Trump on August 12, 2026, the presidential memorandum places the initiative under the National Coordination Center with joint oversight from the Department of Justice and the Department of Homeland Security. Participating firms will operate exclusively under government contracts, direction, and supervision, with strict requirements including technical evaluations, financial guarantees of at least one million dollars, and pre-approval for every operation. The program focuses on disrupting ransomware, phishing, financial fraud, and other schemes affecting American citizens while imposing clear limits to prevent unintended harm to US persons or escalation to prohibited levels of force. In contrast to Brazil’s ongoing policy discussions, the US move formally recognizes that advanced offensive capabilities now reside primarily in the private sector and creates a regulated mechanism to access them. Operational rules must be published within 60 days, marking a significant shift in how governments integrate private expertise into state-directed cyber actions.
Russia to Require Independent Lab Testing of Sovereign AI Models for Legal and Traditional Values Compliance
The Russian Ministry of Digital Development is discussing a certification scheme under which developers can submit large generative AI models to accredited independent laboratories. These labs will verify compliance with Russian legislation and traditional spiritual-moral values defined in presidential decree No. 809. Only models seeking official national or sovereign status, which unlocks state support, data access and priority procurement, will undergo the process. Developers must first conduct self-testing according to a risk-oriented methodology and supply architecture details, filtering mechanisms and other documentation. Accredited laboratories will then run benchmarks, attempt prompt-injection attacks and produce evaluation reports, while the final decision remains with MinTsifry. Separate security assessments for government systems will be performed by the FSB and FSTEC Russia. Experts have called for transparent, reproducible tests and periodic re-certification after model updates.
Why Separate Corporate and Personal Email Accounts: Risks of Mixing Work and Private Communications
Mixing corporate and personal email accounts creates serious security, compliance, and operational risks for both employees and organizations. When employees forward contracts or client data to personal mailboxes to bypass size limits or convenience, copies proliferate beyond company control in phones, backups, and cloud services. After termination, the employer loses any ability to revoke access or audit the data, while personal accounts often lack multi-factor authentication and strong password practices. Russian legislation including Federal Law No. 152-FZ on personal data, the Labor Code, and Federal Law No. 98-FZ on trade secrets requires proper protection of sensitive information. Using work email for shopping, banking, or password recovery exposes the corporate domain to phishing and leaks, while the reverse creates dependency on private accounts for business continuity. The recommended practice is strict separation with unique passwords, MFA on both accounts, and approved corporate channels for file transfer.