UNC6426 used stolen GitHub tokens from the 2025 nx npm breach to gain AWS admin access in under 72 hours, enabling data theft and cloud destruction.

Hackers are targeting vulnerabilities in Ivanti Endpoint Manager, SolarWinds Web Help Desk, and VMware Workspace ONE.

The statue, depicting them embracing on a copy of the Titanic bow, is the third placed on the Mall by the artists depicting a connection between Trump and Epstein.