AntiMalwareJuly 22, 2026🇷🇺Translated from Russian

Google Tests Third-Party App Store Support in Play Store Following Epic Games Antitrust Ruling

Google is currently testing several new features in the Play Store, including an experimental section called Play Labs, support for third-party app stores, and an expanded search bar. These changes have been identified in a recent version of the service, although most of the new capabilities remain inaccessible to regular users at this time.

The most significant development is the planned ability to install alternative app marketplaces directly from Google Play. The company had previously confirmed work on this functionality, which stems from the ongoing antitrust proceedings involving Google and Epic Games. After the settlement between the two companies was withdrawn, the 2024 court ruling once again became active, requiring greater openness to competing stores.

The new menu option for third-party stores was discovered only after direct intervention in the application code. It appears in an additional menu but currently returns an error when users attempt to open an alternative marketplace. In the same area, researchers also found Play Labs, an experimental section where users will likely be able to test upcoming store features before they reach general availability. Google already uses similar experimental sections in other products, including its main search engine.

While Play Labs and the third-party store option are not yet functional, the updated search interface is already working. Google is preparing a two-line search panel designed to accommodate longer natural-language queries, accompanied by an Ask Store prompt. Instead of entering a short app name, users will be encouraged to describe their needs in detail, after which the store will attempt to suggest suitable applications.

These experiments follow recent Play Store improvements such as enhanced search capabilities and the option to test widgets during app installation. Broader rollout of the new search panel is expected in the coming weeks. However, APK analysis only reveals features currently under development, and Google retains the option to modify, postpone, or abandon any of them before release.

The direction of these changes is notable: the main Android app store is preparing to distribute competing marketplaces to users, effectively turning competition itself into a feature that can be installed through Google Play.

Related articles

AntiMalwareOther

Rostelecom Outage Triggers 29-Minute Mass Disruptions Across Russian Internet Services

A 29-minute failure in Rostelecom's data transmission network on August 6 caused widespread access problems to Russian online services. The operator quickly rerouted traffic to backup equipment, restoring normal operations without revealing the root cause. Users reported issues connecting to marketplaces, banks, social platforms, IT company services and other telecom providers. The majority of complaints originated from Rostelecom's own subscribers who experienced connection and service access failures. Although the incident remained brief and did not escalate into prolonged digital disruption, it highlighted the heavy reliance on a single major provider. The event demonstrated how even a short technical problem at a large operator can simultaneously affect access to stores, financial services and everyday online platforms.

HabrOther

Read-Only Utility Automates Detailed Audits of UserGate NGFW Firewall Policies

A cybersecurity specialist at Gazprom CPS developed a read-only utility to analyze large-scale UserGate NGFW firewall policies without making any configuration changes. The tool connects via the UserGate XML-RPC API to collect rules, statistics, zones, network lists, services, users, and groups, then normalizes the data into a unified model for analysis. It performs eleven independent checks grouped into lifecycle, overly permissive access, observability, and documentation categories, flagging rules that have not fired recently, allow management ports broadly, lack logging, or have empty descriptions. Results are exported to a navigable Excel report featuring a rules-by-checks matrix, human-readable object names, and editable manual verdicts such as OK, requires attention, or false positive. The first full run on a production policy with over 1000 rules and 4500 related objects took 24 minutes and highlighted 39 percent of rules for review, with more than half showing multiple red flags. The approach preserves the original snapshot in JSON for repeatable offline analysis and comparison over time.

AntiMalwareOther

Internet Outages Disrupt Access to Russian Websites and Applications Across Multiple Regions

Users in several Russian regions reported widespread connectivity problems where internet access appeared available but failed to load most domestic websites and online services. Affected areas include Saint Petersburg along with Nizhny Novgorod, Rostov, and Tyumen regions according to reports compiled by the Telegram channel Baza. Connections remained technically active yet produced repeated errors when attempting to reach Russian sites, mobile applications, and web-based platforms. The precise scale of the disruption remains undetermined and it is unclear whether the incidents stem from a single technical fault or simultaneous failures among multiple network operators. No official statements have been issued regarding the root causes or expected restoration timelines. Individuals affected continue to refresh pages and restart applications while waiting for services to recover.

HabrOther

Step-Up Authentication vs 2FA: Implementing Additional Verification for Sensitive Operations in Corporate Systems

Traditional two-factor authentication secures only the initial login, leaving active sessions vulnerable to misuse during sensitive tasks such as accessing payroll data. Step-Up Authentication addresses this by requiring extra verification at the moment of critical actions rather than at login. The article details how one project moved beyond standard Identity Provider features in WSO2 by building a dedicated PIN-code service and gateway-2fa microservice. This approach uses signed cookies with TTL controls and JWT cross-checks to enforce elevated trust levels without disrupting normal user flows. The solution aligns with Zero Trust principles and was monitored via Matomo and ELK for usage and performance metrics. Key implementation considerations include balancing TTL duration, encrypting stored PINs, and conducting load testing before deployment.