Weekly Cybersecurity Roundup Covers Android Malware, ChatGPT Flaw and Ransomware Incidents
Summary
This weekly roundup covers Mirax and Operation NoVoice Android malware, a patched ChatGPT data-leak flaw, Apple’s ClickFix warning, a Symantec DLP patch, a Minot water-plant ransomware incident, the FBI wiretap-system breach and supplier-linked Nissan data theft.
Key points
- Mirax, an Android banking trojan, offers remote device control and overlays for more than 700 financial apps; the article says it can be rented for up to $3,000 per month.
- Italy’s data protection authority fined Intesa Sanpaolo €31.8 million after finding an employee illegally accessed thousands of customer accounts over more than two years.
- Apple added a macOS Terminal warning intended to flag suspicious commands used in ClickFix campaigns.
- Check Point researchers reported that a flaw in ChatGPT’s code execution runtime could use DNS queries to exfiltrate conversation history or uploaded files; OpenAI patched it in February.
- Broadcom patched CVE-2026-3991, a high-severity Symantec DLP flaw that could let a local attacker bypass restrictions and gain elevated privileges.
- Minot confirmed its water treatment plant was targeted by ransomware on March 14; staff disconnected affected systems and operated manually for 16 hours.
- The FBI classified a breach of its lawful wiretap infrastructure as a major incident. Chinese state-sponsored hackers are reportedly suspected; Politico reported entry through a commercial ISP’s infrastructure.
- Nissan said leaked information was stolen from a third-party vendor; the Everest ransomware group had claimed access to corporate data. Separately, McAfee researchers found Operation NoVoice in more than 50 Google Play apps with 2.3 million total downloads.
Article Details
- Event Type
- Weekly cybersecurity news roundup covering malware, data exposure, vulnerability remediation, and cyberattacks.
- Impact
- Reported incidents included customer information exposed through unauthorized bank-account access, sensitive data allegedly exfiltrated through ChatGPT's code-execution environment, and a ransomware attack that led a North Dakota water facility to operate manually for 16 hours. The FBI breach was classified as a major incident with significant national security risks. Android malware reports described device takeover and data theft.
MITRE ATT&CK
CVE
Threat Actors
Malware
Vendors
AppleApple updates Mac security to combat ClickFix attacksBroadcomBroadcom has issued a patch for a high-severity vulnerability in Symantec Data Loss Prevention (DLP) products.Check PointResearchers at Check Point have discovered a vulnerability that allowed ChatGPT to silently leak sensitive user data to external servers.McAfeeSecurity researchers at McAfee have uncovered a sophisticated Android malware campaign called Operation NoVoice.OpenAIThe flaw was patched by OpenAI in February.
Products
AndroidNew Android malware targets mobile banking usersChatGPTSecret side channel found in ChatGPT code execution environmentGoogle PlayAndroid rootkit may have infected millions via Google PlaymacOSApple has introduced a new warning within the macOS Terminal to protect users from ClickFix campaigns that trick people into running malicious code.Symantec Data Loss Prevention (DLP)Broadcom has issued a patch for a high-severity vulnerability in Symantec Data Loss Prevention (DLP) products.