Attackers exploit flaw in GDPR-themed WordPress plugin to hijack websites. The campaign’s goals aren’t immediately clear, as the malefactors don’t appear to be leveraging the hijacked websites for further nefarious purposes. Google’s data charts path to avoiding malware on Android. Plus security researchers bypass encryption on self-encrypting drives.