Unverified50% confidenceFactExact time
Kubernetes的默认配置往往授予Pod过多权限，使得云原生渗透路径（IMDS凭证获取到服务账户横向移动）频繁出现在真实攻击中
1
Sources
50%
Confidence
Long-term
Relevance
8/15/2026
First Seen
Sources
Related Claims
UnverifiedA prerequisite for exploiting this vulnerability is that the attacker already has a certain level of Tailscale network access, meaning they are already a legitimate but restricted member of the network.68% similarUnverifiedQR code access carries security risks including replay attacks, session credential leakage due to long-lived tokens, and man-in-the-middle attacks.67% similarUnverifiedIf malware obtains sufficiently high privileges on a device, it is theoretically still possible to exploit the private key locally in real time to perform signing, but this requires remaining persistently active and proxying every verification request, which greatly increases attack complexity.66% similarUnverified横向渗透（Lateral Movement）是高级持续性威胁（APT）攻击的核心阶段，常见手段包括Pass-the-Hash、Kerberoasting及利用共享凭证64% similarUnverified勒索软件攻击者往往会在潜伏数周至数月后才触发加密程序，期间通过横向移动渗透备份系统、域控制器等关键节点63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/752160API
curl https://kongchang.com/api/v1/knowledge/claims/752160MCP
get_claim(id=752160)