INC ransomware explotó fallas de SonicWall durante tres semanas antes del parche — Colombia entre los países afectados

Ciberseguridadlatam •Redacción CSL • August 6, 2026

El grupo INC ransomware lideró la explotación de dos vulnerabilidades críticas en dispositivos SonicWall durante tres semanas antes de que el fabricante divulgara los fallos y publicara parches el 14 de julio. La campaña alcanzó a casi 900 víctimas en 71 países, incluida Colombia. Qué pasó Las vulnerabilidades CVE-2026-15409 y CVE-2026-15410 fueron explotadas activamente desde […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

INC Ransomware Exploits SonicWall Vulnerabilities, Calls Victims Directly The INC Ransomware group has exploited two critical vulnerabilities in SonicWall devices, specifically CVE-2026-15409 and CVE-2026-15410, affecting organizations in 71 countries, including Colombia. This campaign began three weeks prior to the patch release on July 14, 2026, and has reportedly impacted nearly 900 victims. Notably, INC Ransomware employed a unique tactic by calling victims directly to pressure them during extortion efforts. The vulnerabilities were publicly disclosed and patched by SonicWall, but active exploitation was confirmed to have started at least three weeks earlier. The attack vector primarily targeted SonicWall SMA 1000 devices, which are widely used in various sectors. The situation remains critical as organizations are urged to ensure their systems are updated to mitigate risks. 3 sources 70

Extracted Entities

INC ransomware explotó fallas de SonicWall durante tres semanas antes del parche — Colombia entre los países afectados

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Countries (1)

CVEs (2)

MITRE ATT&CK (1)

Ransomware Groups (1)