policies

BetaBeacon
March 5, 2026
- Developers on Google Play can now use their own billing systems alongside Google Play's payment system - The service fee for in-app purchases tied to new installs will be 20%, but developers in certain programs will pay 15% - Developers using Google Play's billing system will pay a separate 5% billing fee in certain regions - Google is launching a Registered App Stores program to simplify the installation of third-party Android stores
AppWizard
March 4, 2026
Google is launching a Registered App Stores program for Android, allowing third-party app stores to officially register if they meet specific quality and safety criteria. This program aims to provide a better installation experience for users and will be rolled out in a major Android release later this year, initially targeting markets outside the US. Registration is optional, and stores can continue using the existing sideloading process. Alongside this, Google is unbundling its fee structure, reducing service fees for developers to between 15% and 20%, with an additional 5% fee for using Google Play billing in certain regions. The rollout of the new billing structure is expected by the end of June in the US, UK, and Europe, with global completion by September 30, 2027. The initiative is part of a broader settlement with Epic Games and reflects ongoing legal pressures for greater competition in app distribution.
AppWizard
March 4, 2026
Alphabet's Google has announced a transformation in app distribution on Android devices, allowing external companies to register and launch their own app stores by paying a one-time fee. This change aims to enhance accessibility for competitors and lower costs for developers. Google will reduce its standard commission for developers from 30% to as low as 15% or 10% in some cases, with implementation expected by June in the US, UK, and EU, and similar changes in Australia, South Korea, and Japan by the end of 2026. Developers using Google’s billing services will incur a flat fee of 5%, while they can also opt for third-party payment processors. Epic Games has expressed approval of these changes, which they believe will help resolve ongoing litigation. Google generated approximately .66 billion in sales from its app marketplace in 2020, and regulatory changes could reduce its gross profit by around billion. The European Commission has accused Google of violating the Digital Markets Act, which could lead to fines of up to 10% of its global annual revenue. Google has previously faced €9.5 billion in fines for competition law violations. A US jury ruled in 2023 that certain Android policies violated antitrust law, leading to an injunction requiring Google to allow competing app stores access to its app catalog. Despite regulatory pressures, Google stated that the changes to the developer fee structure were voluntary and not mandated by legal rulings.
Winsage
March 4, 2026
A proof-of-concept exploit for CVE-2026-20817, a local privilege escalation vulnerability in the Windows Error Reporting (WER) service, has been released by security researcher oxfemale on GitHub. This vulnerability allows low-privileged users to gain SYSTEM-level access through crafted Advanced Local Procedure Call (ALPC) messages. The flaw is located in the WER service's SvcElevatedLaunch method, which fails to validate caller privileges before executing WerFault.exe with user-supplied command line parameters. The CVSS v3.1 base score for this vulnerability is 7.8, indicating a high severity level. It affects unpatched versions of Windows 10, Windows 11, Windows Server 2019, and Windows Server 2022 prior to the January 2026 update. Demonstrations have shown successful exploitation on Windows 11 23H2. Security teams are advised to monitor for unusual processes related to WerFault.exe, investigate missing SeTcbPrivilege in SYSTEM tokens, and review WER-related activities from low-privilege users. Immediate application of the January 2026 security patches is recommended, and a temporary workaround involves disabling the WER service.
Winsage
March 2, 2026
The migration from NTLM to Kerberos authentication is essential for improving security in Windows systems, but it faces challenges such as legacy systems and hardcoded authentication. Organizations must identify NTLM usage, conduct testing with NTLM disabled, and make necessary adjustments or upgrades to migrate successfully. Ongoing monitoring is crucial post-migration to prevent NTLM from re-entering the network. NTLM is associated with significant security vulnerabilities and has been exploited by various threat groups, making its elimination a priority for organizations despite potential hesitations to invest in the migration process. Transitioning to Kerberos is seen as a strategic security investment.
Winsage
March 1, 2026
Windows 11 users often find system settings scattered, making configurations difficult to access. The Sophia Script for Windows is an open-source PowerShell module designed to debloat and optimize Windows 11 and 10. It requires manual modifications for customization and can be downloaded via PowerShell or from GitHub. Users must extract files, run the SophiaScriptWrapper.exe, and import the Sophia.ps1 file to customize and export their script. To execute the script, users must navigate to the script's directory in PowerShell, set execution policies, and run the customized script. Individual functions can also be executed by navigating to the script directory and using specific commands. The Sophia Script offers extensive control over system-level functions, allowing for deep customization of privacy settings and system behaviors, but may not be suitable for all users due to its complexity.
Search