CrowdStrike’s 2026 Technology Threat Landscape Report documents a sustained, multi-actor campaign targeting technology sector organizations across North America and East/Southeast Asia. China-nexus adversaries drove more than 58% of state-sponsored intrusions, focusing on intellectual property and AI capabilities; eCrime actors named 572 technology firms on data leak sites, with initial access broker listings rising approximately 30% year-over-year. Concurrently, the widely used Axios npm package was compromised in a supply chain attack that delivered a remote access trojan to downstream software consumers, compounding third-party risk across organizations that depend on JavaScript ecosystems.