Inc Ransomware Chains SonicWall SMA Zero-Days for Root Access

The Inc ransomware group is exploiting two zero-day vulnerabilities in SonicWall’s SMA (Secure Mobile Access) appliances. Chained together, the flaws give attackers root-level capabilities on the affected devices, turning a remote-access gateway into a foothold inside enterprise networks. SonicWall SMA appliances are widely deployed for VPN and remote access, making this a high-value target. Organizations running SMA appliances should check for patches or mitigations and review for signs of compromise.