Google is rolling out a new policy requiring developer identity verification for all Android app installations on certified devices starting in 2026. This affects apps from the Play Store, third-party stores, and direct APK downloads, aiming to curb malware and increase accountability.

• Enforcement begins in September 2026 in Brazil, Indonesia, Singapore, and Thailand, with a global rollout in 2027.
• The policy applies to certified Android devices with Google Mobile Services, excluding uncertified builds and de-Googled ROMs.
• Google notes malware from internet-sideloaded sources appears over 50 times more often than from Google Play.
• Developers distributing outside Play will use a new Android Developer Console, submitting personal or business details.

NETSCOUT reports a staggering 8 million Distributed Denial-of-Service (DDoS) attacks globally in the first half of 2025, with over 3.2 million occurring in EMEA. The company warns of increasingly sophisticated, AI-powered threats and the evolution of DDoS into geopolitical weapons.

• NETSCOUT observed over 50 attacks greater than a terabit-per-second (Tbps), including a 3.12 Tbps attack in the Netherlands.
• Hacktivist groups like NoName057(16) orchestrated hundreds of coordinated strikes monthly, targeting critical infrastructure.
• Director, threat intelligence Richard Hummel of NETSCOUT stated that traditional defenses are no longer sufficient against current sophisticated attacks.