New Prinz Eugen ransomware prioritizes recent files for encryption
2026-06-21T13:23:29Z•3502c9f18bc62f7e835127ca35c5d14a01dc7c473fe445c49cb4d9355066065c
actively_exploitedbluenoroffcisacredentials_leakdata_breachedr_evasionfortibleedfortinetgentlemen_ransomware_r aasgravity_smtpinformation_disclosurekluenorth_koreanpmoauthpersonally_identifiable_informationprinz_eugenransomwaresalesforcesapphire_sleetsplunksupply_chaintexasvulnerabilitywordpress
What happened
Multiple high-impact security events reported: a new 'Prinz Eugen' ransomware family that prioritizes recently modified files and leaves no ransom note; Microsoft attributes a Mastra AI npm supply-chain compromise (over 140 packages) to North Korean group Sapphire Sleet/BlueNoroff; Klue suffered an OAuth breach enabling theft of tokens and Salesforce data with the Icarus group claiming involvement; an unauthenticated info-disclosure bug in the Gravity SMTP WordPress plugin is being exploited (≈100k sites); Texas Parks & Wildlife vendor breach exposed >3 million driver license records; CISA is警
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 3502c9f18bc62f7e835127ca35c5d14a01dc7c473fe445c49cb4d9355066065c
- Enrichment time
- 2026-06-21T13:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.