MAX Messenger to Open Source Code and Launch Developer Program for Alternative Clients
The Russian messenger MAX is preparing to open its platform to external developers through a new initiative called the MAX Developer Program. The service will provide an API and grant access to the source code of the official client, enabling the creation of alternative applications for both corporate environments and specialized user scenarios.
Participation is limited to IT companies based in Russia and friendly countries. Applicants must prove experience in delivering large-scale IT projects and demonstrate compliance with security standards. Selected developers are required to follow secure development practices, implement strong encryption, and pass independent code audits to ensure protection of user data and infrastructure.
Approved participants will receive technical documentation, the design system, and the full source code of the official MAX client. They will also obtain access tokens for platform integration and gain access to pre-built mechanisms for user registration and fraud prevention, eliminating the need to develop these components independently.
While interface customization and new usage scenarios are permitted, all third-party clients must strictly adhere to the API terms of use, particularly regarding security requirements. Applications for the program can be submitted through the dedicated portal at dev.max.ru, although the exact start date of the program has not been announced.
Related articles
UK Regulator Ofcom Investigates Meta Over Instagram Instants Compliance With Online Safety Act
Britain's communications regulator Ofcom has opened an investigation into Meta to determine whether the company properly assessed risks before launching the Instagram Instants feature. The probe focuses on compliance with the Online Safety Act, specifically the potential for illegal content distribution and harms to minors. Instants, introduced in May 2026, allows users to exchange images that disappear after viewing. Under UK rules, platforms must update risk assessments before rolling out significant changes. Ofcom will first gather evidence and, if violations are found, issue a preliminary decision allowing Meta to respond. Penalties for non-compliance can reach 18 million pounds or 10 percent of global turnover, whichever is higher. Meta maintains it conducted risk analysis and implemented safeguards such as forwarding restrictions and teen account protections before launch.
Russia Plans Additional Security Checks for Gosuslugi Portal Access
Prime Minister Mikhail Mishustin has directed the Ministry of Digital Development to develop extra authentication measures for the Gosuslugi portal used by 120 million citizens. The new controls would apply both to initial logins and to account recovery procedures. Details on the exact checks and implementation timeline remain unspecified as the ministry must first propose a concrete mechanism. In parallel, officials are preparing a third package of anti-fraud measures that includes a unified consent platform inside Gosuslugi for managing personal data processing permissions. The platform would let users view which organizations access their data, revoke prior consents, and report violations. Russian police have separately warned that fraudsters are already exploiting the topic of account protection by sending messages that threaten blocking or data leaks and urge victims to call provided numbers.
Entering Cybersecurity Without a Specialized Degree: Sector Rules and Practical Entry Points
The article examines whether a specialized higher education diploma is necessary to start a career in information security. It breaks down three main industry segments—state security structures, regulated government organizations, and private business—and explains the differing formal and practical requirements in each. In government-related roles, candidates must meet strict regulatory standards for education and approved programs. Private companies instead focus on demonstrable technical skills in networks, Windows Server, Linux, and security tools. The piece also covers typical junior engineer expectations, real-world career paths from unrelated backgrounds, and four key ways to prove competence without a diploma. It concludes with advice on building home labs, troubleshooting skills, and accessing open training resources like the CyberED course.
MTS, MegaFon and Beeline Must Temporarily Suspend Radio Equipment at FSO Request Under Extended Frequency Licenses
Russian telecom operators MTS, MegaFon and VimpelCom (Beeline) have received extensions for their radio frequency allocations until 31 December 2027, but the licenses now include a binding requirement to pause operations of radio-electronic equipment upon demand from the Federal Security Service (FSO). The State Commission for Radio Frequencies (GKRCH) added this condition during its 31 August meeting, directly linking compliance with FSO instructions to the continued use of spectrum originally allocated in 2006. The measure applies during security operations, high-priority state activities and special FSO events, potentially causing temporary loss of mobile connectivity for subscribers in affected areas. Although FSO powers to request such suspensions have existed since 2011, the new decision embeds the obligation explicitly into the frequency license terms. At the same time, the operators retain earlier commitments to expand network coverage to all settlements with at least 2,000 residents by 31 March 2027. The dual requirements illustrate how spectrum policy now balances nationwide connectivity goals with operational readiness for temporary shutdowns ordered by security authorities.