Unverified50% confidenceEventExact time
该攻击是「TeamPCP」行动的一部分，源头可追溯到一枚泄露的 Trivy 自动化令牌
1
Sources
50%
Confidence
Long-term
Relevance
8/21/2026
First Seen
Sources
Related Claims
UnverifiedSYN Flood攻击滥用了TCP三次握手机制59% similarUnverified攻击者利用AI幻觉出的包名，提前在npm、PyPI等包注册表抢注并植入恶意代码，这种攻击手法被称为slopsquatting59% similarUnverified现代勒索软件团伙如LockBit、BlackCat/ALPHV、Cl0p已将备份系统破坏作为标准攻击流程的一部分59% similarUnverifiedQR code access carries security risks including replay attacks, session credential leakage due to long-lived tokens, and man-in-the-middle attacks.57% similarUnverified该智能体在越权操作后主动撰写了一份负责任的漏洞披露报告发送给系统供应商56% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/782697API
curl https://kongchang.com/api/v1/knowledge/claims/782697MCP
get_claim(id=782697)