Every asserted link across the corpus, materialized once with its source. Each edge names its two independent confidence axes where the source carries them — Evidence (is it real?) kept separate from Attribution (whose is it?). Indicators are defanged.
| From | Relationship | To | Confidence | Source | As of |
|---|---|---|---|---|---|
| CVE-2026-81963campaign | Related to | CVE-2026-69498cve | — | Correlated cluster | 2026-09-08 |
| CVE-2026-68820campaign | Related to | CVE-2026-59132cve | — | Correlated cluster | 2026-08-11 |
| Qilin (fka Agenda) · Qilincampaign | Related to | CVE-2026-50751cve | — | Correlated cluster | 2026-09-25 |
| LegacyHivecampaign | Related to | CVE-2026-61925cve | — | Correlated cluster | 2026-08-11 |
| LegacyHivecampaign | Related to | CVE-2026-62873cve | — | Correlated cluster | 2026-08-11 |
| Qilin ransomwarecampaign | Related to | CVE-2025-25249cve | — | Correlated cluster | 2026-09-11 |
| CVE-2026-68820campaign | Related to | CVE-2026-63519cve | — | Correlated cluster | 2026-08-11 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2010-3904cve | — | Correlated cluster | 2026-09-16 |
| BadIIScampaign | Related to | CVE-2026-1731cve | — | Correlated cluster | 2026-08-26 |
| Dysphoriacampaign | Related to | CVE-2026-55255cve | — | Correlated cluster | 2026-08-24 |
| CVE-2026-81963campaign | Related to | CVE-2026-69829cve | — | Correlated cluster | 2026-09-08 |
| LegacyHivecampaign | Related to | CVE-2026-62832cve | — | Correlated cluster | 2026-08-11 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-62830cve | — | Correlated cluster | 2026-08-17 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · ZshBucketcampaign | Related to | CVE-2026-35273cve | — | Correlated cluster | 2026-08-26 |
| CVE-2026-68820campaign | Related to | CVE-2026-64911cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-81963campaign | Related to | CVE-2026-78454cve | — | Correlated cluster | 2026-09-08 |
| BadIIScampaign | Related to | CVE-2017-11882cve | — | Correlated cluster | 2026-08-26 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-16232cve | — | Correlated cluster | 2026-09-16 |
| Cavern Manticore · Caverncampaign | Related to | CVE-2026-20215cve | — | Correlated cluster | 2026-07-08 |
| CVE-2026-81963campaign | Related to | CVE-2026-69827cve | — | Correlated cluster | 2026-09-08 |
| LegacyHivecampaign | Related to | CVE-2026-65791cve | — | Correlated cluster | 2026-08-11 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-66799cve | — | Correlated cluster | 2026-08-17 |
| CVE-2026-81963campaign | Related to | CVE-2026-69864cve | — | Correlated cluster | 2026-09-08 |
| Dysphoriacampaign | Related to | CVE-2016-20016cve | — | Correlated cluster | 2026-08-24 |
| Cavern Manticore · Caverncampaign | Related to | CVE-2026-58523cve | — | Correlated cluster | 2026-07-08 |
| payload · XMRigcampaign | Related to | CVE-2024-38193cve | — | Correlated cluster | 2026-09-03 |
| CVE-2026-68820campaign | Related to | CVE-2026-70332cve | — | Correlated cluster | 2026-08-11 |
| CVE-2026-81963campaign | Related to | CVE-2026-83939cve | — | Correlated cluster | 2026-09-08 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-59133cve | — | Correlated cluster | 2026-08-17 |
| BadIIScampaign | Related to | CVE-2021-22555cve | — | Correlated cluster | 2026-08-26 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-62832cve | — | Correlated cluster | 2026-08-17 |
| CVE-2026-68820campaign | Related to | CVE-2026-62788cve | — | Correlated cluster | 2026-08-11 |
| MacSync Stealercampaign | Related to | CVE-2026-63030cve | — | Correlated cluster | 2026-08-18 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-55040cve | — | Correlated cluster | 2026-09-16 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-9198cve | — | Correlated cluster | 2026-09-16 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-62788cve | — | Correlated cluster | 2026-08-17 |
| Trojanized PDF softwarecampaign | Related to | CVE-2026-62822cve | — | Correlated cluster | 2026-08-17 |
| Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaign | Related to | CVE-2026-43494cve | — | Correlated cluster | 2026-09-16 |
| CVE-2026-81963campaign | Related to | CVE-2026-69518cve | — | Correlated cluster | 2026-09-08 |
| BadIIScampaign | Related to | CVE-2022-0847cve | — | Correlated cluster | 2026-08-26 |
| Dysphoriacampaign | Uses | T1566.003technique | — | Correlated cluster | 2026-08-24 |
| MacSync Stealercampaign | Uses | T1560technique | — | Correlated cluster | 2026-08-18 |
| payload · Amateracampaign | Uses | T1068technique | — | Correlated cluster | 2026-09-24 |
| AnyDeskcampaign | Uses | T1071.001technique | — | Correlated cluster | 2026-09-17 |
| PowerShell-based RATcampaign | Uses | T1486technique | — | Correlated cluster | 2026-08-31 |
| PowerShell-based RATcampaign | Uses | T1219technique | — | Correlated cluster | 2026-08-31 |
| payload · XMRigcampaign | Uses | T1574.002technique | — | Correlated cluster | 2026-09-03 |
| BADBOXcampaign | Uses | T1071.001technique | — | Correlated cluster | 2026-08-27 |
| Dysphoriacampaign | Uses | T1567technique | — | Correlated cluster | 2026-08-24 |
| DeadLock ransomwarecampaign | Uses | T1548.002technique | — | Correlated cluster | 2026-09-04 |