Every asserted link across the corpus, materialized once with its source. Each edge names its two independent confidence axes where the source carries them — Evidence (is it real?) kept separate from Attribution (whose is it?). Indicators are defanged.
| From | Relationship | To | Confidence | Source | As of |
|---|---|---|---|---|---|
| CVE-2026-85880campaign | Related to | CVE-2026-70351cve | — | Correlated cluster | 2026-09-09 |
| Qilin (fka Agenda) · Qilincampaign | Related to | CVE-2026-76017cve | — | Correlated cluster | 2026-09-25 |
| LegacyHivecampaign | Related to | CVE-2026-62822cve | — | Correlated cluster | 2026-08-11 |
| Cyclops Blinkcampaign | Related to | CVE-2026-20079cve | — | Correlated cluster | 2026-09-10 |
| CVE-2026-68820campaign | Related to | CVE-2026-62824cve | — | Correlated cluster | 2026-08-11 |
| Dysphoriacampaign | Related to | CVE-2020-25499cve | — | Correlated cluster | 2026-08-24 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-62896cve | — | Correlated cluster | 2026-08-17 |
| msgbox.execampaign | Related to | CVE-2026-67276cve | — | Correlated cluster | 2026-09-21 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2025-43529cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-81963campaign | Related to | CVE-2026-65669cve | — | Correlated cluster | 2026-09-08 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2025-9491cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-85880campaign | Related to | CVE-2026-77500cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-85880campaign | Related to | CVE-2026-69310cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-81963campaign | Related to | CVE-2026-78525cve | — | Correlated cluster | 2026-09-08 |
| CVE-2026-81963campaign | Related to | CVE-2026-70585cve | — | Correlated cluster | 2026-09-08 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-71331cve | — | Correlated cluster | 2026-08-17 |
| CVE-2026-85880campaign | Related to | CVE-2026-65818cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-85880campaign | Related to | CVE-2026-73017cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-68820campaign | Related to | CVE-2026-50515cve | — | Correlated cluster | 2026-08-11 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2025-7443cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2021-22986cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2025-6389cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-81963campaign | Related to | CVE-2026-72960cve | — | Correlated cluster | 2026-09-08 |
| CVE-2026-81963campaign | Related to | CVE-2026-72981cve | — | Correlated cluster | 2026-09-08 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-29059cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2022-0847cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-68820campaign | Related to | CVE-2026-70355cve | — | Correlated cluster | 2026-08-11 |
| BadIIScampaign | Related to | CVE-2025-53770cve | — | Correlated cluster | 2026-08-26 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2021-21551cve | — | Correlated cluster | 2026-09-16 |
| BadIIScampaign | Related to | CVE-2015-3246cve | — | Correlated cluster | 2026-08-26 |
| CVE-2026-85880campaign | Related to | CVE-2026-73018cve | — | Correlated cluster | 2026-09-09 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2025-32432cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-81963campaign | Related to | CVE-2026-73023cve | — | Correlated cluster | 2026-09-08 |
| BadIIScampaign | Related to | CVE-2026-31635cve | — | Correlated cluster | 2026-08-26 |
| MacSynccampaign | Related to | CVE-2026-12537cve | — | Correlated cluster | 2026-08-18 |
| CVE-2026-85880campaign | Related to | CVE-2026-69478cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-85880campaign | Related to | CVE-2026-69769cve | — | Correlated cluster | 2026-09-09 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · ZshBucketcampaign | Related to | CVE-2025-8088cve | — | Correlated cluster | 2026-08-26 |
| SPECTREcampaign | Related to | CVE-2021-29441cve | — | Correlated cluster | 2026-08-20 |
| CVE-2026-81963campaign | Related to | CVE-2026-69600cve | — | Correlated cluster | 2026-09-08 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2021-27137cve | — | Correlated cluster | 2026-09-16 |
| LegacyHivecampaign | Related to | CVE-2026-62688cve | — | Correlated cluster | 2026-08-11 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2025-8088cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-68820campaign | Related to | CVE-2026-65664cve | — | Correlated cluster | 2026-08-11 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-15410cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-85880campaign | Related to | CVE-2026-81951cve | — | Correlated cluster | 2026-09-09 |
| UNC1549 / TA455 · NightLedgercampaign | Related to | CVE-2026-66322cve | — | Correlated cluster | 2026-08-12 |
| payload · XMRigcampaign | Related to | CVE-2026-48710cve | — | Correlated cluster | 2026-08-26 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2020-8515cve | — | Correlated cluster | 2026-09-16 |
| LegacyHivecampaign | Related to | CVE-2026-71331cve | — | Correlated cluster | 2026-08-11 |