Every asserted link across the corpus, materialized once with its source. Each edge names its two independent confidence axes where the source carries them — Evidence (is it real?) kept separate from Attribution (whose is it?). Indicators are defanged.
| From | Relationship | To | Confidence | Source | As of |
|---|---|---|---|---|---|
| Dysphoriacampaign | Related to | CVE-2025-34152cve | — | Correlated cluster | 2026-08-24 |
| CVE-2026-68820campaign | Related to | CVE-2026-65657cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-85880campaign | Related to | CVE-2026-72950cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-68820campaign | Related to | CVE-2026-61930cve | — | Correlated cluster | 2026-08-11 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2017-0199cve | — | Correlated cluster | 2026-09-16 |
| Dysphoriacampaign | Related to | CVE-2026-0300cve | — | Correlated cluster | 2026-08-24 |
| CVE-2026-85880campaign | Related to | CVE-2026-69725cve | — | Correlated cluster | 2026-09-09 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2022-35733cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-81963campaign | Related to | CVE-2026-71340cve | — | Correlated cluster | 2026-09-08 |
| CVE-2026-81963campaign | Related to | CVE-2026-69285cve | — | Correlated cluster | 2026-09-08 |
| CVE-2026-68820campaign | Related to | CVE-2026-63520cve | — | Correlated cluster | 2026-08-11 |
| Dysphoriacampaign | Related to | CVE-2026-56164cve | — | Correlated cluster | 2026-08-24 |
| Dysphoriacampaign | Related to | CVE-2026-0740cve | — | Correlated cluster | 2026-08-24 |
| CVE-2026-81963campaign | Related to | CVE-2026-81963cve | — | Correlated cluster | 2026-09-08 |
| Dysphoriacampaign | Related to | CVE-2026-20316cve | — | Correlated cluster | 2026-08-24 |
| CVE-2026-68820campaign | Related to | CVE-2026-63515cve | — | Correlated cluster | 2026-08-11 |
| Qilin (fka Agenda) · Qilincampaign | Related to | CVE-2020-1472cve | — | Correlated cluster | 2026-09-25 |
| Qilin (fka Agenda) · Qilincampaign | Related to | CVE-2026-50752cve | — | Correlated cluster | 2026-09-25 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · ZshBucketcampaign | Related to | CVE-2025-6218cve | — | Correlated cluster | 2026-08-26 |
| CVE-2026-81963campaign | Related to | CVE-2026-67636cve | — | Correlated cluster | 2026-09-08 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2020-36847cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2025-3248cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-68820campaign | Related to | CVE-2026-62878cve | — | Correlated cluster | 2026-08-11 |
| LegacyHivecampaign | Related to | CVE-2026-65788cve | — | Correlated cluster | 2026-08-11 |
| AnyDeskcampaign | Related to | CVE-2020-0688cve | — | Correlated cluster | 2026-09-17 |
| CVE-2026-81963campaign | Related to | CVE-2026-69921cve | — | Correlated cluster | 2026-09-08 |
| CVE-2026-68820campaign | Related to | CVE-2026-62712cve | — | Correlated cluster | 2026-08-11 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-70332cve | — | Correlated cluster | 2026-08-17 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · ZshBucketcampaign | Related to | CVE-2019-13272cve | — | Correlated cluster | 2026-08-26 |
| payload · Amateracampaign | Related to | CVE-2026-28797cve | — | Correlated cluster | 2026-09-24 |
| CVE-2026-68820campaign | Related to | CVE-2026-62819cve | — | Correlated cluster | 2026-08-11 |
| SPECTREcampaign | Related to | CVE-2015-5287cve | — | Correlated cluster | 2026-08-20 |
| UNC1549 / TA455 · NightLedgercampaign | Related to | CVE-2026-66321cve | — | Correlated cluster | 2026-08-12 |
| CVE-2026-81963campaign | Related to | CVE-2026-69784cve | — | Correlated cluster | 2026-09-08 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-61348cve | — | Correlated cluster | 2026-08-17 |
| Astarothcampaign | Related to | CVE-2026-63030cve | — | Correlated cluster | 2026-08-18 |
| LegacyHivecampaign | Related to | CVE-2026-50515cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-81963campaign | Related to | CVE-2026-72936cve | — | Correlated cluster | 2026-09-08 |
| Cavern Manticore · Caverncampaign | Related to | CVE-2026-14422cve | — | Correlated cluster | 2026-07-08 |
| LegacyHivecampaign | Related to | CVE-2026-63525cve | — | Correlated cluster | 2026-08-11 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2021-32305cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-55255cve | — | Correlated cluster | 2026-09-16 |
| LegacyHivecampaign | Related to | CVE-2026-62918cve | — | Correlated cluster | 2026-08-11 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-62741cve | — | Correlated cluster | 2026-08-17 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2018-14558cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-39987cve | — | Correlated cluster | 2026-09-16 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-62893cve | — | Correlated cluster | 2026-08-17 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-43284cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-68820campaign | Related to | CVE-2026-62735cve | — | Correlated cluster | 2026-08-11 |
| LegacyHivecampaign | Related to | CVE-2026-64907cve | — | Correlated cluster | 2026-08-11 |