Unverified50% confidenceFactExact time
Traditionally, machine identity credentials were managed manually by operations, and problems such as excessive permissions, long-term non-rotation, and non-revocation upon departure are widespread, making them a key target for attackers.
1
Sources
50%
Confidence
Long-term
Relevance
10/12/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe core dependency of lateral movement is credentials and permissions, as attackers rely on stealing and reusing identity credentials to jump between systems.74% similarUnverifiedWithout rigorous authentication, permission isolation, and input validation, a hijacked agent may cause damage to backend systems via an MCP server.70% similarUnverifiedMalicious or poorly crafted skills may leak API keys, sensitive data, or execute unexpected operations through an agent's tool-calling permissions.68% similarUnverifiedIf malware obtains sufficiently high privileges on a device, it is theoretically still possible to exploit the private key locally in real time to perform signing, but this requires remaining persistently active and proxying every verification request, which greatly increases attack complexity.68% similarUnverified账户安全类问题最不适合自动化处理，因为它需要严格的人工身份核验，自动化处理反而可能引入新的安全漏洞67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1009830API
curl https://kongchang.com/api/v1/knowledge/claims/1009830MCP
get_claim(id=1009830)