UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours
· Source: thehackernews.com
In short
A threat actor known as UNC6426 leveraged stolen credentials from the nx npm package supply chain compromise to breach a victim's cloud environment within 72 hours. The attack involved using stolen GitHub tokens to create AWS administrator roles, enabling data exfiltration and destruction in production environments. This incident represents an AI-assisted supply chain abuse case where malicious intent is expressed through natural-language prompts rather than traditional attack vectors.
Read Original Article — Read the full article on the publisher’s site.
Tags: supply-chain, cybersecurity, cloud-security, npm, automation, threat-intelligence