INC Ransomware weaponizes SonicWall SMA 1000 zero‑days, hits 885 victims
INC ransomware has hijacked the newly disclosed SonicWall SMA‑1000 VPN flaws (CVE‑2026‑15409/10), accelerating attacks to 885 victims across government and private sectors. The chain enables credential theft, MFA seed extraction, and deep lateral movement, forcing organizations worldwide to patch immediately or face persistent compromise.