Every asserted link across the corpus, materialized once with its source. Each edge names its two independent confidence axes where the source carries them — Evidence (is it real?) kept separate from Attribution (whose is it?). Indicators are defanged.
| From | Relationship | To | Confidence | Source | As of |
|---|---|---|---|---|---|
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-66018cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-42897cve | — | Correlated cluster | 2026-09-16 |
| Cavern Manticore · Caverncampaign | Related to | CVE-2026-20243cve | — | Correlated cluster | 2026-07-08 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-21858cve | — | Correlated cluster | 2026-09-16 |
| LegacyHivecampaign | Related to | CVE-2026-62816cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-85880campaign | Related to | CVE-2026-69301cve | — | Correlated cluster | 2026-09-09 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-64910cve | — | Correlated cluster | 2026-08-17 |
| CVE-2026-68820campaign | Related to | CVE-2026-62918cve | — | Correlated cluster | 2026-08-11 |
| LegacyHivecampaign | Related to | CVE-2026-62819cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-68820campaign | Related to | CVE-2026-62713cve | — | Correlated cluster | 2026-08-11 |
| Qilin (fka Agenda) · Qilincampaign | Related to | CVE-2026-35273cve | — | Correlated cluster | 2026-09-25 |
| CVE-2026-85880campaign | Related to | CVE-2026-69406cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-68820campaign | Related to | CVE-2026-63518cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-68820campaign | Related to | CVE-2026-68820cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-85880campaign | Related to | CVE-2026-72983cve | — | Correlated cluster | 2026-09-09 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · ZshBucketcampaign | Related to | CVE-2017-0199cve | — | Correlated cluster | 2026-08-26 |
| CVE-2026-85880campaign | Related to | CVE-2026-69890cve | — | Correlated cluster | 2026-09-09 |
| Cavern Manticore · Caverncampaign | Related to | CVE-2026-14410cve | — | Correlated cluster | 2026-07-08 |
| payload · XMRigcampaign | Related to | CVE-2026-28797cve | — | Correlated cluster | 2026-08-26 |
| CVE-2026-68820campaign | Related to | CVE-2026-62911cve | — | Correlated cluster | 2026-08-11 |
| UNC1549 / TA455 · NightLedgercampaign | Related to | CVE-2026-66326cve | — | Correlated cluster | 2026-08-12 |
| CVE-2026-68820campaign | Related to | CVE-2025-60719cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-85880campaign | Related to | CVE-2026-72982cve | — | Correlated cluster | 2026-09-09 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-41948cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-46817cve | — | Correlated cluster | 2026-09-16 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-68804cve | — | Correlated cluster | 2026-08-17 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-86207cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-68820campaign | Related to | CVE-2026-64921cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-85880campaign | Related to | CVE-2026-69730cve | — | Correlated cluster | 2026-09-09 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2015-5287cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2018-11511cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-61979cve | — | Correlated cluster | 2026-09-16 |
| SPECTREcampaign | Related to | CVE-2019-18935cve | — | Correlated cluster | 2026-08-20 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-33824cve | — | Correlated cluster | 2026-09-16 |
| Dysphoriacampaign | Related to | CVE-2026-3844cve | — | Correlated cluster | 2026-08-24 |
| payload · Amateracampaign | Related to | CVE-2026-20079cve | — | Correlated cluster | 2026-09-24 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-35273cve | — | Correlated cluster | 2026-09-16 |
| Dysphoriacampaign | Related to | CVE-2026-19478cve | — | Correlated cluster | 2026-08-24 |
| Qilin (fka Agenda) · Qilincampaign | Related to | CVE-2026-20316cve | — | Correlated cluster | 2026-09-25 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-65657cve | — | Correlated cluster | 2026-08-17 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2023-46747cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-81963campaign | Related to | CVE-2026-69710cve | — | Correlated cluster | 2026-09-08 |
| payload · XMRigcampaign | Related to | CVE-2025-68700cve | — | Correlated cluster | 2026-09-03 |
| CVE-2026-85880campaign | Related to | CVE-2026-73009cve | — | Correlated cluster | 2026-09-09 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-0257cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2024-55591cve | — | Correlated cluster | 2026-09-16 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-62819cve | — | Correlated cluster | 2026-08-17 |
| Dysphoriacampaign | Related to | CVE-2021-27137cve | — | Correlated cluster | 2026-08-24 |
| CVE-2026-81963campaign | Related to | CVE-2026-81955cve | — | Correlated cluster | 2026-09-08 |
| payload · XMRigcampaign | Related to | CVE-2026-28797cve | — | Correlated cluster | 2026-09-03 |