[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPKFpb9jZD9uwg1NrjgzMbWaWuZIzJnZAM8EYEDsMsmI":3},{"article":4,"iocs":41,"watch_terms":42,"solutions":43,"lesson":99},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"0d13c71e-3c1f-4607-921a-a2ad2e5711c3","Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries","google-sets-sept-30-deadline-for-android-developer-verification-in-four-countrie-10f4ea","Google has set September 30, 2026, as the day it begins enforcing Android developer verification in the first four countries, and the major device-maker app stores are in from the start. On that date, certified Android phones in Brazil, Indonesia, Singapore, and Thailand will block normal installs of apps whose developers have not registered an identity with Google, whether the app","Google will begin enforcing Android developer identity verification on September 30, 2026, in Brazil, Indonesia, Singapore, and Thailand. Certified Android devices in these countries will block installations of apps from developers who have not registered their identity with Google. This measure aims to combat malware and scams, particularly affecting open-source app distribution channels.","Google mandates Android developer verification for app installs in Brazil, Indonesia, Singapore, and Thailand starting","https:\u002F\u002Fthehackernews.com\u002F2026\u002F06\u002Fgoogle-sets-sept-30-deadline-for.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEisV9q8kKe0eopbInTHgwScUvzjKlnPTpk74j7M6F-6BH46hVr9wcadvztA2RYJdKDQDzpV89bN4wH0hEL9qTfIh2_4f3FEIT1OWwSeYehcOb-sVNNkEshTBBC6qviBMlFuwMXQL2iG_VVVBaT6NoGnbdcVBfcMm61T6NosKLtOdMgIebKCRh7hukQxIOk\u002Fs1600\u002Fplaystore.jpg","2026-06-22T12:45:08+00:00","2026-06-22T14:00:14.890034+00:00",7,[17,20],{"name":18,"type":19},"Android","product",{"name":21,"type":22},"Google","vendor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":23,"icon":25,"name":26,"slug":27},null,"Policy","policy",[29,34,39],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":40},{"id":23,"icon":25,"name":26,"slug":27},[],[21,18],{"controls":44,"vendors":93},[45,66],{"slug":46,"name":47,"problem":48,"products":49},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[50,58],{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":67,"name":68,"problem":69,"products":70},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[71,79,85],{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-curation","JFrog Curation","https:\u002F\u002Fjfrog.com\u002Fcuration\u002F","Blocks malicious and risky open-source packages before they enter your repositories.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":80,"product_name":81,"url":83,"description":84},"socket","Socket","\u002Fvendor-logos\u002Fsocket.png","https:\u002F\u002Fsocket.dev\u002F","Detects and blocks malicious and risky packages in npm, PyPI and other ecosystems.",{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"sonatype","Sonatype","\u002Fvendor-logos\u002Fsonatype.png","sonatype-firewall","Sonatype Firewall","https:\u002F\u002Fwww.sonatype.com\u002Fproducts\u002Fsonatype-firewall","Blocks malicious and policy-violating open-source components at download.",[94],{"slug":95,"name":21,"logo_path":96,"roles":97},"google","\u002Fvendor-logos\u002Fgoogle.png",[98],"reported_by",{"slug":100,"title":101,"body":102,"framework_refs":103,"framework_notes":112},"google-mandates-developer-identity-verification-to-block-malicious-android-apps","Google Mandates Developer Identity Verification to Block Malicious Android Apps","Google's enforcement of developer identity verification addresses a long-standing gap in mobile app supply chain trust — unverified developers have historically been a vector for distributing malware and scam applications through sideloading and unofficial channels. By requiring verified identity registration before September 30, 2026, Google is introducing an access control layer at the distribution level, ensuring accountability for app publishers. This matters because unverified app sources represent a significant attack surface, particularly in high-growth mobile markets like Brazil, Indonesia, Singapore, and Thailand. Organizations and consumers relying on open-source or third-party Android app channels must now audit their app sourcing practices to avoid operational disruption when enforcement begins.",[104,105,106,107,108,109,110,111],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 6: Access Control Management","NIST SP 800-124 Rev. 2: Guidelines for Managing the Security of Mobile Devices","NIST AC-2: Account Management","NIST SR-3: Supply Chain Controls and Processes","GDPR Article 25: Data Protection by Design and by Default","NIST CSF ID.SC-2: Supply Chain Risk Management","ISO\u002FIEC 27001 A.14.2.7: Outsourced Development",{}]