Topic
Google Issues Emergency Chrome Update Patching Seven Vulnerabilities Including Three Critical Flaws
Vulnerabilities & Exploits
Google Quietly Rolls Out Android Developer Verifier App to Curb APK Sideloading Fraud
Fraud & Social Engineering
VK Apps Remain Downloadable in US Google Play Despite Removal in Russia and Turkey Amid Sanctions
Policy & RegulationGoogle to Allow Competing Android App Stores Directly Inside Play Store After Epic Games Court Ruling
Google is preparing to open its official Google Play store to rival Android app marketplaces starting July 22, following a court order issued in the long-running antitrust lawsuit with Epic Games. The ruling stems from the 2020 Fortnite dispute over Google’s 30% commission and direct in-app purchases that bypassed the platform’s billing system. A federal judge determined that Google had unlawfully prevented device makers from promoting or pre-installing alternative app stores, thereby reinforcing Google Play’s monopoly position. As a result, approved third-party stores will now be distributed directly through Google Play, receive default access to its app catalog, and be subject to an annual $5,000 verification fee. Developers retain the right to block distribution of their apps on specific stores, while participating marketplaces must meet strict security, copyright, and update obligations or risk removal if suspicious installations exceed 1%. Although the changes are expected to apply primarily in the United States, the decision marks a fundamental shift in how Google must accommodate competitors within its own ecosystem.
Google Urges European Commission to Stop Mass Blocking of IP Addresses, DNS Services and VPNs in Piracy Fight
Google has called on the European Commission to abandon the widespread practice of blocking IP addresses, DNS services and VPNs as a means of combating pirate sites, describing the approach as both ineffective and risky. The company explained that such blocks fail to remove illegal content permanently and allow users to quickly switch to alternative DNS providers, VPNs or new addresses, enabling piracy to continue uninterrupted. Blocking entire IP ranges is particularly problematic because a single address or range is often shared by multiple unrelated legitimate websites and cloud services, leading to collateral damage for lawful users. Google cited the December 2019 incident in Portugal, where ISP blocks on virtual IP addresses disrupted important Google services and affected Google Cloud customers sharing the same infrastructure. A similar outcome followed the blocking of The Pirate Bay in the United Kingdom, after which lists of proxy servers rapidly appeared online to restore access. The search giant stressed that these measures only create temporary obstacles rather than eliminating the source of pirated material and increase the chance of accidentally disabling legitimate online resources.
Hidden Spy for 1.6 Million Users: Popular Browser Extension ModHeader Secretly Collected Browsing History
Google and Microsoft have removed the popular ModHeader browser extension from the Chrome Web Store and Microsoft Edge Add-ons after security researchers discovered a hidden mechanism designed to secretly collect users' browsing history. The extension, which had approximately 1.6 million installations, allowed developers to modify HTTP headers for testing and debugging purposes but contained a dormant data-collection module in its legitimate codebase. British firm Stripe OLT confirmed that the suspicious code was part of the genuine signed build rather than a fake version. Although the history-stealing functionality remained inactive due to an empty internal browser list, the extension still transmitted telemetry data and could have been activated remotely via a simple update. Experts recommend immediate removal of the extension, replacement of any credentials entered through it, and blocking of the domains stanfordstudies[.]com and extensions-hub[.]com.
Google Enhances Android Backup Controls in Play Services Update, Adds Document Sync to Google Drive Amid Storage Limit Cut
Google is updating its Android backup system through Google Play Services version 26.25, introducing separate toggles for messaging backups and the ability to automatically save documents to the cloud. Users can now disable SMS, MMS, and RCS backups independently, though RCS remains nested under the MMS category for less visibility. The new document backup feature supports formats including DOC, PPT, XLS, and PDF, storing copies in a device-named folder on Google Drive without automatic synchronization to the original files. These changes coincide with Google's reduction of free storage from 15 GB to 5 GB, where Android backups now count against the quota, potentially turning small 40 MB backups into much larger archives. The update provides more granular control over what gets backed up, including call history and system settings, accessible via Settings > Accounts and backup > Google Backup > Other device data. While the feature can help preserve important files, it risks quickly exhausting limited free storage if documents are included.