Drift loses $280 million as hackers seize Security Council powers

A batch of BleepingComputer reports (Apr 1–2, 2026) describes widespread active exploitation, new malware, and evasive attacker infrastructure. Notable items include large-scale protocol compromise at Drift ($280M loss), active zero-days and pre-auth RCE chains (TrueConf zero-day; Progress ShareFile), thousands of exposed F5 BIG-IP APM instances under RCE attack, a critical Cisco IMC authentication bypass, and a destructive data‑wiping incident at Stryker attributed to Handala. The feed also highlights growing operational tradecraft — residential proxies evading IP reputation checks, mail-drop