Unverified50% confidenceFactExact time
According to U.S. CISA statistics, a significant proportion of initial entry points in successful attacks on critical infrastructure come from employee credential leaks or misconfigurations, rather than zero-day vulnerabilities.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/20/2026
First Seen
Valid until: 12/19/2026
Sources
Related Entities
Related Claims
Unverified绝大多数成功的数据泄露事件都涉及人为因素，如钓鱼邮件、弱密码、社会工程学攻击73% similarUnverifiedThe National Ministry of Industry and Information Technology Emergency Center once issued a security risk alert pointing out that certain open-source intelligent agents contain a large number of built-in security vulnerabilities.69% similarUnverifiedThe coordinated vulnerability disclosure mechanism in the cybersecurity field is a relatively mature example of industry self-regulation, in which companies have established an understanding of notifying one another upon discovering vulnerabilities and allowing a remediation window.68% similarUnverifiedSecurity research firm Irregular disclosed that four security breach incidents targeting AI laboratories can be traced back to the same underlying problem.68% similarUnverifiedIn an incident disclosed by OpenAI, stolen credentials were listed first in the incident response report, although zero-day vulnerabilities were also exploited.68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/936709API
curl https://kongchang.com/api/v1/knowledge/claims/936709MCP
get_claim(id=936709)