Cybercrime , Fraud Management & Cybercrime , Network Firewalls, Network Access Control Theat Actor Accessed INC and Lynx Ransom Negotiation Panels Tiffany Wang • July 2, 2026 SOCRadar linked the FortiBleed credential-harvesting operation to ransomware groups INC Ransom and Lynx, finding evidence that a sophisticated initial access broker compromised more than 430,000 FortiGate firewalls.