In Other News: ChatGPT Data Leak, Android Rootkit, Water Facility Hit by Ransomware
SecurityWeek roundup: Android rootkit, ChatGPT data leak, water facility ransomware, FBI breach.
This SecurityWeek news roundup covers multiple significant cybersecurity incidents including Operation NoVoice, a sophisticated Android rootkit affecting 2.3 million Google Play users; a ChatGPT vulnerability that leaked user data via DNS exfiltration; and a ransomware attack on a North Dakota water treatment facility. Additional stories include a €31.8M fine against Italian bank Intesa Sanpaolo, a high-severity Symantec DLP vulnerability, and the FBI classifying a breach of its wiretap infrastructure as a major national security incident reportedly linked to Chinese state-sponsored actors.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Apple?
Get an email when a new story names Apple, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThis collection of incidents demonstrates how vulnerabilities can emerge across the entire technology ecosystem, from mobile app stores to AI platforms and critical infrastructure. The Android rootkit affecting 2.3 million users shows how malicious actors exploit trusted distribution channels, while the ChatGPT data leak reveals how even cutting-edge platforms can have fundamental security flaws. The ransomware attack on water infrastructure and the FBI wiretap system breach underscore how these vulnerabilities can cascade into national security threats, emphasizing the critical need for comprehensive vulnerability management across all technology layers.
What helps against this
How we list vendors
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Mirax
- malware — Operation NoVoice
- malware — Everest
- cve — CVE-2026-3991