Anthropic Claude Mythos Preview: The More Capable AI Becomes, the More Security It Needs

CrowdStrike published a series of April–March 2026 blog posts covering AI security and agentic tooling, supply‑chain compromise activity, platform and endpoint protections, and a specific Kerberos relay vulnerability. Notable items: STARDUST CHOLLIMA likely compromised the axios npm package (supply‑chain risk), and guidance/detections for CVE-2026-20929 (Kerberos authentication relay via DNS CNAME abuse). Other posts detail Falcon product updates (Secure Boot certificate lifecycle, Falcon Data Security, Falcon for IT, Falcon Flex services), CNAPP adversary‑informed risk prioritization, and new