Skip to main content

Google To Require Identity Verification for All Android App Developers by 2027

1 day 18 hours ago
Google will require identity verification for all Android app developers, including those distributing apps outside the Play Store, starting September 2026 in Brazil, Indonesia, Singapore, and Thailand before expanding globally through 2027. Developers must register through a new Android Developer Console beginning March 2026. The requirement applies to certified Android devices running Google Mobile Services. Google cited malware prevention as the primary motivation, noting sideloaded apps contain 50 times more malware than Play Store apps. Hobbyist and student developers will receive separate account types. Developer information submitted to Google will not be displayed to users.

Read more of this story at Slashdot.

msmash

Perplexity's AI Browser Comet Vulnerable To Prompt Injection Attacks That Hijack User Accounts

1 day 19 hours ago
Security researchers have uncovered critical vulnerabilities in Perplexity's Comet browser that enable attackers to hijack user accounts and execute malicious code through the browser's AI summarization features. The flaws, discovered independently by Brave and Guardio Labs, exploit indirect prompt injection attacks that bypass traditional web security mechanisms when users request webpage summaries. Brave demonstrated account takeover through a malicious Reddit post that compromised Perplexity accounts when summarized. The vulnerability allows attackers to embed commands in webpage content that the browser's large language model executes with full user privileges across authenticated sessions. Guardio's testing found the browser would complete phishing transactions and prompt users for banking credentials without warning indicators. The paid browser, available to Perplexity Pro and Enterprise Pro subscribers since July, processes untrusted webpage content without distinguishing between legitimate instructions and attacker payloads.

Read more of this story at Slashdot.

msmash

Stock Exchanges Urge Regulators To Crack Down on 'Tokenised Stocks'

1 day 20 hours ago
A group representing the world's biggest stock exchanges has called on securities regulators to clamp down on so-called tokenised stocks, arguing that the blockchain-based tokens create new risks for investors and could harm market integrity. From a report: Crypto exchange Coinbase and broker Robinhood are among those making a push into the nascent sector that could shake up the securities investing landscape. Proponents say tokenised equities can cut trading costs, speed up settlement and facilitate around-the-clock trading. The World Federation of Exchanges (WFE), in a letter sent to three regulatory bodies last Friday, said it was concerned the tokens "mimic" equities without providing the same rights or trading safeguards.

Read more of this story at Slashdot.

msmash