Every asserted link across the corpus, materialized once with its source. Each edge names its two independent confidence axes where the source carries them — Evidence (is it real?) kept separate from Attribution (whose is it?). Indicators are defanged.
| From | Relationship | To | Confidence | Source | As of |
|---|---|---|---|---|---|
| CVE-2026-68820campaign | Related to | CVE-2026-50481cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-81963campaign | Related to | CVE-2026-67631cve | — | Correlated cluster | 2026-09-08 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2025-28137cve | — | Correlated cluster | 2026-09-16 |
| Dysphoriacampaign | Related to | CVE-2024-42009cve | — | Correlated cluster | 2026-08-24 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2018-0802cve | — | Correlated cluster | 2026-09-16 |
| BadIIScampaign | Related to | CVE-2024-12356cve | — | Correlated cluster | 2026-08-26 |
| CVE-2026-81963campaign | Related to | CVE-2026-69799cve | — | Correlated cluster | 2026-09-08 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-56290cve | — | Correlated cluster | 2026-09-16 |
| Dysphoriacampaign | Related to | CVE-2026-59726cve | — | Correlated cluster | 2026-08-24 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-45386cve | — | Correlated cluster | 2026-09-16 |
| Rhysida · Qilincampaign | Related to | CVE-2020-1472cve | — | Correlated cluster | 2026-09-22 |
| Qilin ransomwarecampaign | Related to | CVE-2024-47575cve | — | Correlated cluster | 2026-09-11 |
| Qilin ransomwarecampaign | Related to | CVE-2026-6876cve | — | Correlated cluster | 2026-09-11 |
| CVE-2026-68820campaign | Related to | CVE-2026-63508cve | — | Correlated cluster | 2026-08-11 |
| LegacyHivecampaign | Related to | CVE-2026-59133cve | — | Correlated cluster | 2026-08-11 |
| Dysphoriacampaign | Related to | CVE-2025-13486cve | — | Correlated cluster | 2026-08-24 |
| BadIIScampaign | Related to | CVE-2026-31431cve | — | Correlated cluster | 2026-08-26 |
| CVE-2026-85880campaign | Related to | CVE-2026-78505cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-85880campaign | Related to | CVE-2026-69465cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-81963campaign | Related to | CVE-2026-73006cve | — | Correlated cluster | 2026-09-08 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2020-22653cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-85880campaign | Related to | CVE-2026-69779cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-68820campaign | Related to | CVE-2026-65668cve | — | Correlated cluster | 2026-08-11 |
| UNC1549 / TA455 · NightLedgercampaign | Related to | CVE-2026-66316cve | — | Correlated cluster | 2026-08-12 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2021-4034cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-85880campaign | Related to | CVE-2026-72961cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-85880campaign | Related to | CVE-2026-69366cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-68820campaign | Related to | CVE-2026-62766cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-68820campaign | Related to | CVE-2026-62766cve | — | Correlated cluster | 2026-08-11 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · ZshBucketcampaign | Related to | CVE-2017-11882cve | — | Correlated cluster | 2026-08-26 |
| LegacyHivecampaign | Related to | CVE-2026-66807cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-68820campaign | Related to | CVE-2026-62820cve | — | Correlated cluster | 2026-08-11 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-59132cve | — | Correlated cluster | 2026-08-17 |
| CVE-2026-68820campaign | Related to | CVE-2026-50516cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-85880campaign | Related to | CVE-2026-72980cve | — | Correlated cluster | 2026-09-09 |
| LegacyHivecampaign | Related to | CVE-2026-50516cve | — | Correlated cluster | 2026-08-11 |
| msaRATcampaign | Related to | CVE-2026-60137cve | — | Correlated cluster | 2026-09-01 |
| Dysphoriacampaign | Related to | CVE-2026-59310cve | — | Correlated cluster | 2026-08-24 |
| CVE-2026-81963campaign | Related to | CVE-2026-73017cve | — | Correlated cluster | 2026-09-08 |
| MacSync Stealercampaign | Related to | CVE-2026-58528cve | — | Correlated cluster | 2026-08-18 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-62878cve | — | Correlated cluster | 2026-08-17 |
| CVE-2026-85880campaign | Related to | CVE-2026-69473cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-68820campaign | Related to | CVE-2026-64910cve | — | Correlated cluster | 2026-08-11 |
| payload · XMRigcampaign | Related to | CVE-2025-49113cve | — | Correlated cluster | 2026-09-03 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-56161cve | — | Correlated cluster | 2026-08-17 |
| CVE-2026-85880campaign | Related to | CVE-2026-68876cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-68820campaign | Related to | CVE-2026-59115cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-81963campaign | Related to | CVE-2026-69649cve | — | Correlated cluster | 2026-09-08 |
| LegacyHivecampaign | Related to | CVE-2026-63519cve | — | Correlated cluster | 2026-08-11 |
| LegacyHivecampaign | Related to | CVE-2026-62823cve | — | Correlated cluster | 2026-08-11 |