Google is set to mandate developer identity verification for APK sideloading, starting September 30, 2026 in Brazil, Indonesia, Singapore, and Thailand, with a global rollout by 2027. Critics including Tuta and EFF say the move "Apple-fies" Android, threatening the open sideloading ecosystem that crypto wallets and privacy tools rely on. Google claims sideloaded apps carry over 50 times more malware than Play Store apps, but opponents argue the real motive is control and profit. The policy also introduces limited accounts and advanced flows for users who need to install unverified apps.

TechFlowPost’s latest roundup tracked a wide set of developments across AI, crypto, chips, big tech and macro markets. In AI, Claude Code has made its autonomous mode the default setting, shifting the tool from a coding assistant toward a system that can execute commands on its own. At the same time, SemiAnalysis was cited in community discussion claiming Google’s Gemini 3.5 Pro was quietly shelved internally before launch, while another rumored model, Hark Handoff, spread through social channels on unverified benchmark screenshots. Meta was also said to be preparing an open release of its 30B model Muse Glimmer, with 4-bit quantization allowing it to run on a single 24GB GPU. On the crypto side, Upbit listed six tokens including CYS, ICNT and XAN, opening BTC and USDT pairs and putting fresh focus on smaller-cap sectors such as DePIN, chain-wide operating systems and AI networks. Community debate also turned toward the value of on-chain AI agents, with one popular post arguing that many projects simply route AI output into smart contracts without creating new trust assumptions. Elsewhere, traders cut the perceived odds of a September Fed hike ahead of CPI data, a setup that Cointelegraph said could matter for Bitcoin and other risk assets.

Security firm Check Point said on July 27 that a cross-platform malware strain called SparkKitty has been distributed through Apple’s App Store, Google Play, and third-party Android app stores. The malware uses optical character recognition, or OCR, to scan images stored in a user’s photo library for crypto wallet seed phrases, passwords, and QR codes. Once installed, the app requests access to photos, keeps scanning both existing and newly added images, and uploads extracted text along with device information to an attacker-controlled server. Check Point described SparkKitty as an upgraded version of the earlier infostealer SparkCat. On iOS, malicious code was found inside a crypto app called “币 coin,” which reportedly used code obfuscation to pass Apple’s review process. On Android, researchers said a chat and crypto trading app called “SOEX” carried the malware and was removed from Google Play only after surpassing 10,000 downloads. The report also said the malware spread through third-party app stores, sideloaded APKs, modified TikTok versions, and entertainment apps. Check Point warned users not to store seed phrases in phone photo galleries and recommended offline backups instead.

The source says BitMEX itself is not a scam, while fake apps and copycat websites have caused many losses. This article reviews its regulatory history, security record, and the warning signs users should watch for.

An investigative test by The Reporter said Amap sent iPhone location data every 3 seconds, uploaded multiple sensor readings to Alibaba Cloud in China, and included a persistent CAID identifier that survived app reinstallations.

Microsoft disclosed an Android-native flaw in EngageLab SDK 4.5.4 that exposed crypto wallet credentials, including seed phrases and addresses. The issue has been patched, and users are urged to update apps and verify protection status.

Tencent’s HunYuan team has released an open-source offline translation model that compresses 1.8 billion parameters into 440MB, enabling smartphone deployment with support for 33 languages and 1,056 translation directions.

Bitchat, Jack Dorsey’s decentralized messaging app, saw rising adoption in Iran during a nationwide internet blackout, highlighting demand for censorship-resistant offline communication tools.