CNN will report it was the President and his supporters, found the evidence.

1st warning was POTUS tweet at 10:08 PM "FAKE NEWS - ENEMY OF THE PEOPLE!"

2nd warning or actual threat was coded in the second POTUS tweet at 10:15 PM "approve Boarder Security"

Every cnn employee knows that message is full of hate.

So move the "a" and de-code "Bo_rder" you get full message as interpreted by CNN >"approve a Bomb radio Security"

(cnn decoder rings are available in the cnn building gift shop and restroom toilet paper dispensers)