Ryuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison

Security Affairs reports active exploitation of multiple critical vulnerabilities, including an F5 BIG-IP APM zero-day enabling unauthenticated remote code execution, Check Point VPN authentication bypass, and other flaws added to CISA’s KEV catalog. Additional coverage describes WordPress unauthenticated file inclusion leading to possible RCE, phishing-as-a-service compromises affecting over 12,000 inboxes, malware using AI models for decision-making, an infostealer disabling security tools, and alleged government-portal and FBI breaches. The most urgent risks are internet-facing F5, Check-