STARDUST CHOLLIMA Likely Compromises Axios npm Package

CrowdStrike blog feed highlights multiple security topics: a likely supply-chain compromise where threat actor STARDUST CHOLLIMA appears to have tampered with the Axios npm package (risking downstream compromise), detection guidance for CVE-2026-20929 (Kerberos authentication relay via DNS CNAME abuse), and product/security capability announcements (Windows Secure Boot certificate lifecycle management, Falcon Data Security, CNAPP risk prioritization, next-gen SIEM, and AI/agent security controls). Immediate operational concerns are supply‑chain integrity (npm package compromise) and identity/l