[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPnJYW_3cAjNCZZSPJjl5LzBCMvKzqsz7Fm_6F318ZwY":3},{"article":4,"iocs":58,"watch_terms":71,"solutions":72,"lesson":172},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"a1af1eb7-3084-4505-8e17-7b3b8740b94a","In Other News: ChatGPT Data Leak, Android Rootkit, Water Facility Hit by Ransomware","in-other-news-chatgpt-data-leak-android-rootkit-water-facility-hit-by-ransomware","Other noteworthy stories that might have slipped under the radar: Symantec vulnerability, anti-ClickFix mechanism added to macOS, FBI hack classified as major incident. The post In Other News: ChatGPT Data Leak, Android Rootkit, Water Facility Hit by Ransomware appeared first on SecurityWeek.","This SecurityWeek news roundup covers multiple significant cybersecurity incidents including Operation NoVoice, a sophisticated Android rootkit affecting 2.3 million Google Play users; a ChatGPT vulnerability that leaked user data via DNS exfiltration; and a ransomware attack on a North Dakota water treatment facility. Additional stories include a €31.8M fine against Italian bank Intesa Sanpaolo, a high-severity Symantec DLP vulnerability, and the FBI classifying a breach of its wiretap infrastructure as a major national security incident reportedly linked to Chinese state-sponsored actors.","SecurityWeek roundup: Android rootkit, ChatGPT data leak, water facility ransomware, FBI breach.","https:\u002F\u002Fwww.securityweek.com\u002Fin-other-news-chatgpt-data-leak-android-rootkit-water-facility-hit-by-ransomware\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2023\u002F10\u002Fcybersecurity-news.jpg","2026-04-03T12:30:53+00:00","2026-04-03T14:00:14.626328+00:00",9,[17,20,22,24,26,29],{"name":18,"type":19},"OpenAI","vendor",{"name":21,"type":19},"Apple",{"name":23,"type":19},"Broadcom",{"name":25,"type":19},"McAfee",{"name":27,"type":28},"Everest","threat_actor",{"name":30,"type":31},"Android","technology","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":32,"icon":34,"name":35,"slug":36},null,"Threat Intelligence","threat-intelligence",[38,43,48,53],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":44},{"id":45,"icon":34,"name":46,"slug":47},"7d8b5ab8-ea0b-4ced-ae97-ec251b86993a","Ransomware","ransomware",{"category":49},{"id":50,"icon":34,"name":51,"slug":52},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":54},{"id":55,"icon":34,"name":56,"slug":57},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",[59,62,65,67],{"type":57,"value":60,"context":61},"Mirax","Android banking trojan targeting 700+ financial apps, rented for up to $3,000\u002Fmonth",{"type":57,"value":63,"context":64},"Operation NoVoice","Android rootkit campaign via 50+ Google Play apps, 2.3M downloads, exploits patched Android CVEs 2016-2021",{"type":57,"value":27,"context":66},"Ransomware group claiming access to Nissan corporate data",{"type":68,"value":69,"context":70},"cve","CVE-2026-3991","High-severity vulnerability in Symantec Data Loss Prevention (DLP) allowing privilege escalation",[21,23,18],{"controls":73,"vendors":155},[74,103,129],{"slug":75,"name":76,"problem":77,"products":78},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[79,87,95],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"slug":104,"name":105,"problem":106,"products":107},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[108,116,124],{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":125,"product_name":126,"url":127,"description":128},"boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"slug":130,"name":131,"problem":132,"products":133},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[134,140,148],{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":135,"product_name":136,"url":138,"description":139},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",{"vendor_slug":141,"vendor_name":142,"vendor_logo":143,"product_slug":144,"product_name":145,"url":146,"description":147},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"vendor_slug":149,"vendor_name":150,"vendor_logo":151,"product_slug":130,"product_name":152,"url":153,"description":154},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",[156,161,166],{"slug":157,"name":21,"logo_path":158,"roles":159},"apple","\u002Fvendor-logos\u002Fapple.png",[160],"reported_by",{"slug":162,"name":163,"logo_path":164,"roles":165},"check-point","Check Point","\u002Fvendor-logos\u002Fcheck-point.png",[160],{"slug":167,"name":168,"logo_path":169,"roles":170},"google","Google","\u002Fvendor-logos\u002Fgoogle.png",[171],"affected",{"slug":173,"title":174,"body":175,"framework_refs":176,"framework_notes":183},"multiple-critical-security-incidents-highlight-systemic-vulnerabilities","Multiple Critical Security Incidents Highlight Systemic Vulnerabilities","This collection of incidents demonstrates how vulnerabilities can emerge across the entire technology ecosystem, from mobile app stores to AI platforms and critical infrastructure. The Android rootkit affecting 2.3 million users shows how malicious actors exploit trusted distribution channels, while the ChatGPT data leak reveals how even cutting-edge platforms can have fundamental security flaws. The ransomware attack on water infrastructure and the FBI wiretap system breach underscore how these vulnerabilities can cascade into national security threats, emphasizing the critical need for comprehensive vulnerability management across all technology layers.",[177,178,179,180,181,182],"CIS Control 7","NIST SP 800-161","CIS Control 12","NIST CSF PR.DS","CIS Control 13","NIST SP 800-53 SI-2",{}]