UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours

AI Briefing

• – A threat actor gained AWS admin access in 72 hours after exploiting a supply-chain attack on the nx npm package.
• – The attack started with the theft of a developer's GitHub token.
• – The threat actor used the stolen token to breach a victim's cloud environment.