Every asserted link across the corpus, materialized once with its source. Each edge names its two independent confidence axes where the source carries them — Evidence (is it real?) kept separate from Attribution (whose is it?). Indicators are defanged.
| From | Relationship | To | Confidence | Source | As of |
|---|---|---|---|---|---|
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-33017cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-68820campaign | Related to | CVE-2026-62816cve | — | Correlated cluster | 2026-08-11 |
| Dysphoriacampaign | Related to | CVE-2026-29059cve | — | Correlated cluster | 2026-08-24 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2021-29442cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-85880campaign | Related to | CVE-2026-78510cve | — | Correlated cluster | 2026-09-09 |
| UNC1549 / TA455 · NightLedgercampaign | Related to | CVE-2026-66318cve | — | Correlated cluster | 2026-08-12 |
| CVE-2026-68820campaign | Related to | CVE-2026-49163cve | — | Correlated cluster | 2026-08-11 |
| Astarothcampaign | Related to | CVE-2026-58528cve | — | Correlated cluster | 2026-08-18 |
| CVE-2026-68820campaign | Related to | CVE-2026-59124cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-81963campaign | Related to | CVE-2026-80083cve | — | Correlated cluster | 2026-09-08 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-65617cve | — | Correlated cluster | 2026-08-17 |
| CVE-2026-68820campaign | Related to | CVE-2026-62873cve | — | Correlated cluster | 2026-08-11 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2013-3307cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-68820campaign | Related to | CVE-2026-63526cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-68820campaign | Related to | CVE-2026-62878cve | — | Correlated cluster | 2026-08-11 |
| payload · XMRigcampaign | Related to | CVE-2025-69286cve | — | Correlated cluster | 2026-09-03 |
| CVE-2026-68820campaign | Related to | CVE-2026-59133cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-85880campaign | Related to | CVE-2026-78509cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-85880campaign | Related to | CVE-2026-69277cve | — | Correlated cluster | 2026-09-09 |
| SparrowDoorcampaign | Related to | CVE-2026-76460cve | — | Correlated cluster | 2026-09-21 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-63532cve | — | Correlated cluster | 2026-08-17 |
| CVE-2026-81963campaign | Related to | CVE-2026-69310cve | — | Correlated cluster | 2026-09-08 |
| CVE-2026-83548campaign | Related to | CVE-2026-83548cve | — | Correlated cluster | 2026-09-07 |
| CVE-2026-81963campaign | Related to | CVE-2026-67643cve | — | Correlated cluster | 2026-09-08 |
| Dysphoriacampaign | Related to | CVE-2025-12057cve | — | Correlated cluster | 2026-08-24 |
| CVE-2026-68820campaign | Related to | CVE-2026-62783cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-81963campaign | Related to | CVE-2026-69274cve | — | Correlated cluster | 2026-09-08 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-64907cve | — | Correlated cluster | 2026-08-17 |
| CVE-2026-81963campaign | Related to | CVE-2026-69605cve | — | Correlated cluster | 2026-09-08 |
| CVE-2026-68820campaign | Related to | CVE-2026-63520cve | — | Correlated cluster | 2026-08-11 |
| LegacyHivecampaign | Related to | CVE-2026-62911cve | — | Correlated cluster | 2026-08-11 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-68820cve | — | Correlated cluster | 2026-08-17 |
| CVE-2026-68820campaign | Related to | CVE-2026-62688cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-68820campaign | Related to | CVE-2026-62737cve | — | Correlated cluster | 2026-08-11 |
| Dysphoriacampaign | Related to | CVE-2025-49113cve | — | Correlated cluster | 2026-08-24 |
| CVE-2026-85880campaign | Related to | CVE-2026-69784cve | — | Correlated cluster | 2026-09-09 |
| Dysphoriacampaign | Related to | CVE-2021-29441cve | — | Correlated cluster | 2026-08-24 |
| CVE-2026-68820campaign | Related to | CVE-2026-68820cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-81963campaign | Related to | CVE-2026-69723cve | — | Correlated cluster | 2026-09-08 |
| CVE-2026-85880campaign | Related to | CVE-2026-83498cve | — | Correlated cluster | 2026-09-09 |
| SPECTREcampaign | Related to | CVE-2010-3904cve | — | Correlated cluster | 2026-08-20 |
| Cyclops Blinkcampaign | Related to | CVE-2026-20316cve | — | Correlated cluster | 2026-09-10 |
| SparrowDoorcampaign | Related to | CVE-2026-91843cve | — | Correlated cluster | 2026-09-21 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-56291cve | — | Correlated cluster | 2026-09-16 |
| SparrowDoorcampaign | Related to | CVE-2026-76461cve | — | Correlated cluster | 2026-09-21 |
| Qilin (fka Agenda) · Qilincampaign | Related to | CVE-2026-76018cve | — | Correlated cluster | 2026-09-25 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · ZshBucketcampaign | Related to | CVE-2024-12356cve | — | Correlated cluster | 2026-08-26 |
| CVE-2026-85880campaign | Related to | CVE-2026-69499cve | — | Correlated cluster | 2026-09-09 |
| CVE-2026-81963campaign | Related to | CVE-2026-69579cve | — | Correlated cluster | 2026-09-08 |
| CVE-2026-81963campaign | Related to | CVE-2026-69473cve | — | Correlated cluster | 2026-09-08 |