Unverified50% confidenceCautionExact time
If service accounts or app registrations with Graph API access lack MFA protection, attackers can programmatically read or modify tenant data at scale after credential leakage.
1
Sources
50%
Confidence
Long-term
Relevance
10/7/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedA token in an authentication system is a credential that proves a user's identity; once stolen, an attacker can impersonate a legitimate user to access services.73% similarUnverifiedAttackers can exploit stolen AI service account credentials to call API interfaces for computing power theft, and such behavior has frequently appeared in terms-of-service violation reports on platforms such as OpenAI and Anthropic.73% similarUnverifiedUsing local proxy tools to take over AI IDE traffic carries security risks including plaintext storage and leakage of API keys, code data privacy being logged and uploaded, and man-in-the-middle attacks72% similarUnverified通过非官方平台获取的API密钥，其请求经中间服务器转发，对话内容、代码、提示词可能被中间方记录，存在敏感数据泄露风险72% similarUnverifiedOnce an attacker gains access to the Monorepo repository, they can often simultaneously access source code across multiple product lines, embedded API keys and service account credentials, CI/CD pipeline configurations, and infrastructure-as-code files72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/983684API
curl https://kongchang.com/api/v1/knowledge/claims/983684MCP
get_claim(id=983684)