[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fz9w8CQW6S1jypuFF4NKe5ULKHyAleBXTUOXp7lfUdA4":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"status":23,"created_at":24,"published_at":25,"article":26,"tags":30,"podcasts":49},"2a77f868-33fc-47c4-b428-5f547dc1274e","eu-forces-google-to-open-android-sensors-to-rival-ai-under-digital-markets-act","2fe1be7f-5776-404d-b6bd-77fecfc4f94e","EU Forces Google to Open Android Sensors to Rival AI Under Digital Markets Act","The European Commission's binding specification under the Digital Markets Act (DMA) highlights how dominant platform providers can leverage privileged hardware and OS-level access to entrench their own products — in this case, Gemini — against fair competition. By controlling exclusive access to the microphone, camera, screen contents, and wake words on Android, Google created structural barriers that regulators now classify as anti-competitive gatekeeping. This matters from a security perspective because mandating third-party AI assistants access to sensitive device inputs (camera, mic, screen) dramatically expands the attack surface and requires rigorous certification frameworks to prevent misuse or data leakage. Organizations and consumers deploying Android devices must now account for a broader set of privileged actors interacting with sensitive hardware, making access governance, audit trails, and supply chain vetting critical priorities.","**Immediate actions:**\n- Review and audit which third-party AI assistants have been granted elevated hardware permissions (camera, microphone, screen) on corporate Android devices.\n- Enforce Mobile Device Management (MDM) policies that restrict installation of uncertified or non-approved AI assistant applications.\n\n**Long-term improvements:**\n- Establish a vendor vetting and supply chain review process aligned with the EU's Qualified AI Assistant Programme certification requirements before onboarding any new AI assistant.\n- Update data classification and data handling policies to account for AI assistants' potential access to screen contents and background app data.\n- Incorporate DMA compliance obligations into your organization's regulatory compliance roadmap and legal review cycles.\n\n**Detection & monitoring measures:**\n- Implement continuous logging and monitoring of hardware permission grants (mic, camera, screen) on managed Android endpoints.\n- Configure SIEM alerts for anomalous or unauthorized access patterns by AI assistant processes to sensitive device APIs.",[12,13,14,15,16,17,18,19,20,21,22],"EU Digital Markets Act (DMA) — Article 6 (Obligations for gatekeepers)","GDPR Article 25 — Data Protection by Design and by Default","GDPR Article 32 — Security of Processing","NIST SP 800-53 AC-3 — Access Enforcement","NIST SP 800-53 AC-6 — Least Privilege","NIST SP 800-53 SA-12 — Supply Chain Protection","NIST SP 800-53 AU-12 — Audit Record Generation","CIS Control 3 — Data Protection","CIS Control 5 — Account Management","CIS Control 16 — Application Software Security","NIST Cybersecurity Framework — Govern (GV.SC) Supply Chain Risk Management","published","2026-07-17T12:20:22.227747+00:00","2026-07-17T12:20:21.928+00:00",{"id":7,"url":27,"slug":28,"title":29},"https:\u002F\u002Fthehackernews.com\u002F2026\u002F07\u002Feu-orders-google-to-open-android-mic.html","e-u-orders-google-to-open-android-mic-camera-and-screen-to-rival-ai-assistants-24fc27","E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants",[31,37,43],{"id":32,"name":33,"slug":34,"description":35,"color":36},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":38,"name":39,"slug":40,"description":41,"color":42},"c0dcc566-3654-4d70-8ede-262a198e732f","Regulatory Compliance","regulatory-compliance","GDPR, NIS2, DORA, sector-specific violations","#ec4899",{"id":44,"name":45,"slug":46,"description":47,"color":48},"c8b843a5-d5a7-41d1-8d3b-cabded09d2ef","Data Protection","data-protection","Unencrypted data, missing DLP, poor classification","#3b82f6",[]]