Ryuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison

Security news digest covering active exploitation of critical F5 BIG-IP APM and other enterprise vulnerabilities, including CVE-2026-94127 zero-day RCE and CVE-2026-85102, as well as a severe unauthenticated WordPress file-inclusion flaw (CVE-2026-87902) with an RCE path. It also reports malware and phishing campaigns involving AI-assisted decision-making, device-code phishing, infostealers, security-tool termination, and alleged government compromises. The highest-priority items are the actively exploited F5 zero-day and CISA KEV additions.