Google’s stringent app store policies removed 180 malicious apps, including spyware like Anatsa/Teabot and KoSpy. Google Play Protect blocks apps from untrusted sources while the Advanced Protection Program requires security keys or passkeys for account access. Google also deletes inactive accounts after two years to reduce hijacking and phishing attack potential.

Mandiant warns of attacks on newly-disclosed Ivanti remote takeover threat
Google’s Mandiant team has issued an alert about a remote code execution flaw in the Ivanti Connect Secure VPN platform. The vulnerability, designated CVE-2025-22457, is