From critical RCEs in F5 devices and a high-profile Axios supply chain hit to the default permission risks lurking in Vertex AI, we break down the week’s most vital security shifts. Furthermore, what you need to do before the April 15 NYDFS deadline.